last executing test programs: 3m49.639194603s ago: executing program 1 (id=394): r0 = creat(0x0, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000300)="2d3a5115868b2f49890a85d256989e092d73d380ae2bd59ce3aa30d5054ff9fc66ff53150111ee9c1a8038aa99174584179fb0e286f8d530ea962197635269e807d047945964395a8fd04f1d655b778dc299ecc149d9572966b8a5e3c5f7409c614ec6a66c823389d1a991226314cde9f9ed479cdd5f557ae9616b219fac8fa4c3cc7c9f5c2c2c", 0x87}) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) sendmmsg$alg(r4, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001740)="415b66934845e42acb83a6dbd1b12a27", 0x10}], 0x1}], 0x1, 0x8000) recvmmsg(r4, &(0x7f0000000100)=[{{&(0x7f00000003c0)=@caif=@dbg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f0000000740)=""/164, 0xa4}, {&(0x7f0000000800)=""/125, 0x7d}, {&(0x7f0000000880)=""/121, 0x79}, {&(0x7f0000000900)=""/143, 0x8f}, {&(0x7f00000009c0)=""/71, 0x47}], 0x8, &(0x7f0000000ac0)=""/173, 0xad}, 0x3}], 0x1, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCFLSH(r6, 0x8910, 0x20001114) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) 3m48.69963446s ago: executing program 1 (id=400): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@afid={'afid', 0x3d, 0x40}}, {@access_user}, {@directio}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x3}}, {@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x61, 0x38, 0x64, 0xa1, 0x34, 0x37, 0x35], 0x2d, [0x63, 0x32, 0x31, 0x65], 0x2d, [0x66, 0x34, 0x63, 0x33], 0x2d, [0x31, 0x33, 0x30, 0x66], 0x2d, [0x37, 0x34, 0x9, 0x38, 0x32, 0x63, 0x66, 0x30]}}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'bridge_slave_1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*\'\x90@'}}, {@seclabel}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xb7-'}}]}}) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 3m48.416250468s ago: executing program 1 (id=402): r0 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc) socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x1) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r3, 0x4b65, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x440000ace) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='fusectl\x00', 0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 3m47.460144949s ago: executing program 1 (id=408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x44) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x541b, 0x69de07874f7f0000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x40008a0}, 0x20004844) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x2, 0x0) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp6=r6, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) socket$netlink(0x10, 0x3, 0x4) 3m45.807213425s ago: executing program 1 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000310a00000000000002000000b7080000000000007b8af8ff00000000b7080000010020007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184500000000000000000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x73, 0x7, &(0x7f00000004c0)=""/7, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x7, 0x5, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x1, 0xb}, {0x1, 0x3, 0xf}, {0x4, 0x2, 0xf, 0xc}, {0x3, 0x2, 0xf, 0x1d}, {0x0, 0x5, 0x10, 0x5}, {0x5, 0x4, 0xc, 0xa}, {0x0, 0x1, 0xc, 0x8}, {0x1, 0x3, 0x7, 0xa}, {0x4, 0x2, 0xf, 0xc}, {0x4, 0x5, 0xc, 0x7}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) dup(0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 3m43.169991987s ago: executing program 1 (id=419): mq_open(&(0x7f0000000340)='\b\x00\x00\x00\x00\x00\x00\x00E\x00)\xd1-\\r\xdem\xb2}\bQ\xa0\xd2VQ\x00Q`\x83\xb6lP\xc6m3\xdb_\xa6v \x98|\xe0l\xb0\xa80\x9a\xf5u\xbd\x1b@\xeb}\xbf\a\xb9\x91\xe8VA\xe8\xd0\xc1\xd8\x95\x90\x90!\x89\x18^Ol;u\x84\xb2(X\xde\xbe%\x98\xd9\xa6g\x15\xc2\xed\x86b3(\x142Y\xb0\xc2\x1d5\\\xdfW\xb5\x9f\vvB\x9a\xb4K\x97{\xd07\xde}\xc0u\x85\xeb\x1f\xf5\x94EB*$\xf0\xa1\xc7p\x1a\x95\xe8:\xef\x12\\\'-\x0f\xae\xcd\xfdE\xcd\x8e\xfd1\xea\xbaiXhv|_N/E\x84\x98<\xbdS)\xb6\xe1\xf8\xa0#\x16\x92\xfc=\xf3!\x87f\xb1\xa8Iz\x1c\x9f\x15ln\x88\xb0$\x8dW\xcc\xccq\xe1\x7f', 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/llc/socket\x00') ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000280)={{}, {0x9}, 0x59, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="88c1b1be0e8da9a10082", 0xa, 0x0, &(0x7f0000000100)={0x2, 0x121, {0x0, 0xc, 0x5d, "79e6bc2a0a377794b5dfd6f9c03618e21787eca37e919316065ddf81a4ade16894759f3cf939dac051bc0ea62625cf2f45379d584ddd714e1f37fbb341b8f6c328ca9a5c061ce57e3245ccc429c6e83db4c52450c386eaf10e597952d7", 0xb7, "cdd232c364cd375d7c8dbae4adb0508299546165048fcdba4fda7f14461da0ae367e01fe309f4585e6d10ca209d430e5d07cda6ac16b4cf951a52cd540d0cdc1e6e19fb4fcc90fb2737445242e5852bdf83400b90014f06e09d95ad3e74f90c5d3ff26fb16581e9b3bdad43da058d79528d0b00291f14cb83f583a32737a424ccb1702dc76dc6b5b64c8c51a4e7c6732841b7321552e01e38739cfcaa1be5c8a6070210d31ea944015355ce28db289bbc26f50ddae42ec"}, 0x2d, "e84bd2a9843d373f894a969a68419fd8e70dace41a07eb20d7f44e0eaa58939215df79161a285ddb52762f9e25"}, 0x15a}) 3m42.752240863s ago: executing program 32 (id=419): mq_open(&(0x7f0000000340)='\b\x00\x00\x00\x00\x00\x00\x00E\x00)\xd1-\\r\xdem\xb2}\bQ\xa0\xd2VQ\x00Q`\x83\xb6lP\xc6m3\xdb_\xa6v \x98|\xe0l\xb0\xa80\x9a\xf5u\xbd\x1b@\xeb}\xbf\a\xb9\x91\xe8VA\xe8\xd0\xc1\xd8\x95\x90\x90!\x89\x18^Ol;u\x84\xb2(X\xde\xbe%\x98\xd9\xa6g\x15\xc2\xed\x86b3(\x142Y\xb0\xc2\x1d5\\\xdfW\xb5\x9f\vvB\x9a\xb4K\x97{\xd07\xde}\xc0u\x85\xeb\x1f\xf5\x94EB*$\xf0\xa1\xc7p\x1a\x95\xe8:\xef\x12\\\'-\x0f\xae\xcd\xfdE\xcd\x8e\xfd1\xea\xbaiXhv|_N/E\x84\x98<\xbdS)\xb6\xe1\xf8\xa0#\x16\x92\xfc=\xf3!\x87f\xb1\xa8Iz\x1c\x9f\x15ln\x88\xb0$\x8dW\xcc\xccq\xe1\x7f', 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/llc/socket\x00') ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000280)={{}, {0x9}, 0x59, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="88c1b1be0e8da9a10082", 0xa, 0x0, &(0x7f0000000100)={0x2, 0x121, {0x0, 0xc, 0x5d, "79e6bc2a0a377794b5dfd6f9c03618e21787eca37e919316065ddf81a4ade16894759f3cf939dac051bc0ea62625cf2f45379d584ddd714e1f37fbb341b8f6c328ca9a5c061ce57e3245ccc429c6e83db4c52450c386eaf10e597952d7", 0xb7, "cdd232c364cd375d7c8dbae4adb0508299546165048fcdba4fda7f14461da0ae367e01fe309f4585e6d10ca209d430e5d07cda6ac16b4cf951a52cd540d0cdc1e6e19fb4fcc90fb2737445242e5852bdf83400b90014f06e09d95ad3e74f90c5d3ff26fb16581e9b3bdad43da058d79528d0b00291f14cb83f583a32737a424ccb1702dc76dc6b5b64c8c51a4e7c6732841b7321552e01e38739cfcaa1be5c8a6070210d31ea944015355ce28db289bbc26f50ddae42ec"}, 0x2d, "e84bd2a9843d373f894a969a68419fd8e70dace41a07eb20d7f44e0eaa58939215df79161a285ddb52762f9e25"}, 0x15a}) 1m8.356138094s ago: executing program 5 (id=938): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000000c0)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000ec0)=ANY=[@ANYBLOB="200f8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x0, 0x18, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="401203010015b8d17c"], 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0xc0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m5.268426992s ago: executing program 5 (id=951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/169, 0xa9, 0x0, &(0x7f0000000980)=""/248, 0xe8}}, 0xfffffffffffffc69) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000145c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x15, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x8fb3fcae0d59ebef, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x3, 0x25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x0, &(0x7f0000001040)}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000240)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x5, 0x1000000, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x10, r4, 0x2c35f000) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f0000000c00)="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", 0x401}], 0x1, 0x1) 1m3.269206316s ago: executing program 5 (id=957): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgid(0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x7, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf2e4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x18}, 0xc000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44810}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x5) 1m2.681173126s ago: executing program 5 (id=961): socket(0x2000000015, 0x80005, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') ftruncate(r0, 0x7fffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x40}, 0x1c) socket(0x2000000015, 0x80005, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') (async) ftruncate(r0, 0x7fffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) lseek(r1, 0x10001, 0x0) (async) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x40}, 0x1c) (async) 1m1.961219398s ago: executing program 5 (id=966): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x2dfd, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff01000000050005000500000005000600040000000800030005000000"], 0x2c}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x404400, 0x21) r4 = open$dir(&(0x7f0000000480)='./file1\x00', 0x12040, 0x40) move_mount(r3, &(0x7f0000000440)='./bus\x00', r4, &(0x7f0000000500)='./bus\x00', 0x201) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000002a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x51}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7007}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000003c0)={0x0, 0x0, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000040)={0xc8, "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"}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000240)) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) preadv2(r8, &(0x7f0000000800)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f00000007c0)=""/55, 0x37}], 0x7, 0x82, 0xfffffffb, 0x12) lseek(r7, 0x0, 0x4) 59.498576699s ago: executing program 0 (id=974): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) eventfd2(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002205000000075119"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="20170500000053e9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20b, 0x10000000000001, &(0x7f0000006680)=0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) clock_gettime(0x0, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003c00), 0x40402, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000004080)) 59.292636693s ago: executing program 5 (id=977): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x40, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000140)={0xffffff8, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x5, 0x8, 0x0, 0x3, 0x1, 0x0, 0xba52, 0x2}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r2, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) 58.999353749s ago: executing program 33 (id=977): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x40, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000140)={0xffffff8, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x5, 0x8, 0x0, 0x3, 0x1, 0x0, 0xba52, 0x2}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r2, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000400)='debugfs\x00', 0x1) 56.266540637s ago: executing program 0 (id=988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/169, 0xa9, 0x0, &(0x7f0000000980)=""/248, 0xe8}}, 0xfffffffffffffc69) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000145c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x15, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x8fb3fcae0d59ebef, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x3, 0x25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x0, &(0x7f0000001040)}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) 55.676852742s ago: executing program 0 (id=990): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083745808c016df05ef0100000301090212000100000000090400000003"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xf9cb, 0xf, 0x1, {0x22, 0xa95}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0x7, 0x6, 0x40, 0x5}, 0x61, &(0x7f00000000c0)={0x5, 0xf, 0x61, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x455b, 0xf00f, 0x0, [0xff0030]}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xfff, 0xff0f, 0xd, [0xf, 0x0, 0x600f, 0x60c8, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x9, 0xd270}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x2, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "626e584d86bd9352321085ed93ae969e"}]}, 0x5, [{0xa7, &(0x7f0000000140)=@string={0xa7, 0x3, "c92484790c66fecfe8e6c983e0eabf2d10e7afff46bf3c6f8e02fcba3baea651bf1fa4aa765f53138a9632ad49443033edad6a9b4f39a781527f722a59ec63e4a335ea6fb3b786310e6fc9710454ec3a80d4173c8a95ad7f8d035ea06a8958f71fd15a8bf7c5d1f79ab7e9519950b9e166899a096f67ff595b0e17626022da60242a750ceff9ba189fed7818073ae1577f59c8e18633d89589b05dad06f6143e5009c27f23"}}, {0x4f, &(0x7f0000000200)=@string={0x4f, 0x3, "446e4c27a3bd4ad6851bde854dee6c1b11bdac23c0a9e06b88700b258539b8114649dc603c465785ece8ed172f9b2e12290a949dd887b4fd8c8b2f3fbc54c6109de7d2de494038d50b97f98693"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x818}}, {0x6b, &(0x7f00000002c0)=@string={0x6b, 0x3, "0f2d43ad60e7b16ecc21af9f4ceaf8d0f36708364a967d017897bcd4124da5ef528a3035a66fb2d00286040dcc3e5dfc3c1796192050d1dc8a7bda70ed2d3e652f54bf8b4c032bc974c30aba218a1e38f6507c6c87ac3496faddeb7689269f16680bcf229ea2b37859"}}, {0x2e, &(0x7f0000000340)=@string={0x2e, 0x3, "1b1f705489e9f2fba9d5280fa8f8655804728b7072df3bfcf3b0d8b3de56279f741cf4cbc92d54635c70cce6"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x7359) 52.523220557s ago: executing program 0 (id=1004): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f77705f69643d0d368baefabf9198a384f6ff8e5ebe2fda0109fb19963d8032f30228507fb4cebffbe77be2c7466c89985113a7916c49b25a8c5e342a9aaeb98b0245d20f066966095d28bb6fbcf541301d1650cb31d088a189e17163b66d79dddd2ebff9b1fbf74e1b3281fdc0cb9793d1f4a55e3df5f73e4bab87880de1e349c5abda53ea10997c080d4eba2c088fad2a7acbaa8b6b21f3585402289b28cff4000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000180)={r4, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x4) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 52.288399794s ago: executing program 0 (id=1007): creat(&(0x7f0000000080)='./file1\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x4, &(0x7f0000000000)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0]) 42.999252917s ago: executing program 0 (id=1036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20001) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000fcdbdf251d000000ddbe9d22"], 0x14}}, 0x20040800) 42.997751091s ago: executing program 34 (id=1036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20001) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0x75f, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000fcdbdf251d000000ddbe9d22"], 0x14}}, 0x20040800) 26.656048392s ago: executing program 3 (id=1079): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000240)=0x1, 0x4) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101482, 0x0) fallocate(r1, 0x3, 0x0, 0x6e34) (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x80081272, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x6, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89d0080b8785d960001000000000000000000000000000000000000000000000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x3]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) (async, rerun: 64) fcntl$setpipe(r3, 0x407, 0x0) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r3, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x3}}}, 0x90) (async, rerun: 64) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRES8=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="723276488975b36d8377322201b4cd63bd36ba98691b828d0f35694a948827811a4775c28b0b75f4e1417aee6db04a30bcf8b08d18497004132990a3c8aa033151e45cab9178749fdeadb04f42d8c5272dab5bedef0c6b93b777e1370edf7c6767979aa69631d2afee27b5080d68d9586ecdd9f525020fad87b60848acb5cd2fb46cc15d4f5e877413493a82b2cace422b304ce93c0439f9c54bf8a31090f16f4c82177bb82544afca", @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r10, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r10, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x0, 0x2, 0xd, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xa, 0x1, 0xfffffffc, 0x0, 0x0, 0x8000, 0x2000, r11, r12}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r14, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @loopback, 0x54}, 0x1c) 26.632694367s ago: executing program 6 (id=1080): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/169, 0xa9, 0x0, &(0x7f0000000980)=""/248, 0xe8}}, 0xfffffffffffffc69) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000145c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x15, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x8fb3fcae0d59ebef, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x3, 0x25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x0, &(0x7f0000001040)}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) 26.373653403s ago: executing program 3 (id=1081): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/169, 0xa9, 0x0, &(0x7f0000000980)=""/248, 0xe8}}, 0xfffffffffffffc69) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000145c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x15, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x8fb3fcae0d59ebef, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x3, 0x25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x0, &(0x7f0000001040)}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)) socket$packet(0x11, 0x3, 0x300) 25.31667626s ago: executing program 6 (id=1083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000208}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x1b, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x60, 0x1}, {0x60, 0x1}, {0xb}, {0xc}, {0x4, 0x1}, {0x30}, {0x5}, {0x36, 0x1}, {0x9}, {0x6}, {0x36}, {0x30, 0x1}, {0x48}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x3c}}, 0x2004d0a4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0xfffffffe}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]]}, 0x38}}, 0x0) 25.233699013s ago: executing program 3 (id=1084): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES8, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x2, "c018"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x6, 0xb3, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0xb, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x803d, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x3, "92121d"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x2, 0x7, 0x4, 0xff, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x5, 0x9, 0x3, 0x6, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x1ff, 0x2, 0xe, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd5, 0x2, 0x8, 0x9, "1c", "dc"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xb0, 0x2, 0x7, 0x1, "6dbdad4c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x10, 0x1, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x71, 0x81, 0x0, {0x7, 0x25, 0x1, 0x81, 0xfd, 0x5}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7f, 0x6, 0x7f, 0xff, 0x9}, 0x38, &(0x7f0000000180)={0x5, 0xf, 0x38, 0x4, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x0, 0xf00, 0x200}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x80, 0x0, 0xf02, [0xff3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "e05bb2c95da133bdae27f840620e0bb8"}]}, 0x2, [{0xc4, &(0x7f0000000200)=@string={0xc4, 0x3, "60c30b3f94f82dabda2820edafb195c535b3027cf4892a20935df20a7fba7245d0ac01e720dfec0ad9e6650ca56985326157d4ec6d5702b327bb858dbba7ec1602ea016e43b6150b14e966b4245204d72d92e4f400195419a53ef6a62e9bff29ee13fe420258102497514a173373e9e8b2d0ce0ded7a8dbd10c31bf2f1fef295c678b49b62274b101309831c859528966c6bf2f610332186463690be6c1831a27b7cd0578aadd66488d69c5e333346e16b79119d8f93842d6853e4dff20fbc1bf361"}}, {0x25, &(0x7f0000000300)=@string={0x25, 0x3, "564633be10fbe4f0875c69cd335f5bafa72af697238226de2a4533d44bdc7c900d5680"}}]}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa0041) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r4, r5, 0x0, 0x10ffff) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0x40045731, &(0x7f0000000000)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 24.719005474s ago: executing program 6 (id=1085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ifreq(r6, 0x8931, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_names='pimreg0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xa, &(0x7f0000000800)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, @ldst={0x3, 0x3, 0x0, 0x4, 0xa, 0x4, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, @jmp={0x5, 0x1, 0xe, 0x8, 0x4, 0x10, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x7, 0xcb, &(0x7f0000000240)=""/203, 0x41100, 0x21, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x4, 0xd94, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=[{0x4, 0x3, 0xc, 0x2}, {0x4, 0x1, 0x7, 0xa}, {0x0, 0x3, 0xc, 0x3}], 0x10, 0x9, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000440)=r7, 0x4) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0800000", @ANYRES16=r8, @ANYBLOB="020026bd7000fedbdf25080000001400060076657468305f746f5f7465616d00000014000200fc0200000000000000000000000000012300070073797374656d5f753a6f626a6563745f723a7661725f72756e5f743a7330000008000400ac14143208000500ac141436140002000000000000000000000000000000000014000300ff02000000000000000000000000000105000100010000002f00070073797374656d5f753a6f626a6563745f723a736373695f67656e657269635f6465766963655f743a73300000"], 0xd0}, 0x1, 0x0, 0x0, 0x8001}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000006c0)=0x14, 0x80800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r7, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000880)=[0x0], 0x0, 0x8e, &(0x7f00000008c0), 0x0, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) 21.573972938s ago: executing program 3 (id=1094): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x20080, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f00000003c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x20080, 0x0) (async) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f00000003c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async) 21.397349916s ago: executing program 3 (id=1095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x7800, 0x8, 0x6, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @multicast2, {[@ra={0x94, 0x4}, @end, @generic={0x88, 0xa, "a656c0da1cbb6ace"}, @rr={0x7, 0x1f, 0x79, [@multicast1, @empty, @empty, @empty, @local, @rand_addr=0x64010101, @remote]}, @generic={0x94, 0x5, "cf5cf7"}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x4, 0x0}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) (async) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x20, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0x6, 0x4, 0x7, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xcb}, @exit, @ldst={0x2, 0x3, 0x4, 0x3, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x91}, @initr0={0x18, 0x0, 0x0, 0x0, 0x756, 0x0, 0x0, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000940)=""/4096, 0x41100, 0x65, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7f8d, @void, @value}, 0x94) 21.24344113s ago: executing program 3 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000180001000000ba0000000000001d01080005000d0001000000b36ce944537cdce7804e61bd8d2a21f5dfdf29a66e28cf72f0e3482380fc9d263048105a5495f8b22cf48552e3d9c0eec33b91447360e1d68aa60967d17c5306e058540c7217c0cce8d250a3168b8a4516f90938676f865e9d74365df163b949c3799eb9104826ab9bcc887bb680d9ed24a04b"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="be7824bd71b44222e2ed6599e1aa584c28c96d8cb878de786d18fa098e18b308f224d1a91cb455455a37432a39ca9224ea36f47afc87110cf29b68fcb0c31b", @ANYRESHEX=r6], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) 20.928511142s ago: executing program 6 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000310a00000000000002000000b7080000000000007b8af8ff00000000b7080000010020007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184500000000000000000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x73, 0x7, &(0x7f00000004c0)=""/7, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x7, 0x5, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x1, 0xb}, {0x1, 0x3, 0xf}, {0x4, 0x2, 0xf, 0xc}, {0x3, 0x2, 0xf, 0x1d}, {0x0, 0x5, 0x10, 0x5}, {0x5, 0x4, 0xc, 0xa}, {0x0, 0x1, 0xc, 0x8}, {0x1, 0x3, 0x7, 0xa}, {0x4, 0x2, 0xf, 0xc}, {0x4, 0x5, 0xc, 0x7}], 0x10, 0x3, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/223, 0x26, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(r3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) pipe(&(0x7f0000000240)) 20.388723167s ago: executing program 6 (id=1098): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r7, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r8 = dup(r4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) 20.136249343s ago: executing program 4 (id=1099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/169, 0xa9, 0x0, &(0x7f0000000980)=""/248, 0xe8}}, 0xfffffffffffffc69) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000145c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x15, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x8fb3fcae0d59ebef, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x3, 0x25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x0, &(0x7f0000001040)}) r4 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) 19.466071226s ago: executing program 4 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8000, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0003040000000403", @ANYRES64=r2]}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file1\x00', &(0x7f0000000100)={0x128142, 0x30, 0x10}, 0x18) 19.442070441s ago: executing program 2 (id=1102): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x202, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0x2d}, 0xf) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400d822a23b3c16218600"/20], 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r5 = syz_open_pts(r4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = dup3(r5, r6, 0x80000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) 19.233057932s ago: executing program 2 (id=1103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='yeah\x00', 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = io_uring_setup(0x7bda, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 18.263410483s ago: executing program 2 (id=1104): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r7, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r8 = dup(r4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) 17.914942449s ago: executing program 6 (id=1105): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f00000000c0)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280802, 0x0) close_range(r9, r7, 0x0) 17.356542746s ago: executing program 4 (id=1106): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/153, 0x99}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') syz_io_uring_setup(0x6f7f, &(0x7f00000003c0)={0x0, 0xf92c, 0x10100, 0x2, 0x1df, 0x0, r6}, &(0x7f0000000300), &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730140000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 17.18206777s ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000310a00000000000002000000b7080000000000007b8af8ff00000000b7080000010020007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184500000000000000000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x73, 0x7, &(0x7f00000004c0)=""/7, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x7, 0x5, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x1, 0xb}, {0x1, 0x3, 0xf}, {0x4, 0x2, 0xf, 0xc}, {0x3, 0x2, 0xf, 0x1d}, {0x0, 0x5, 0x10, 0x5}, {0x5, 0x4, 0xc, 0xa}, {0x0, 0x1, 0xc, 0x8}, {0x1, 0x3, 0x7, 0xa}, {0x4, 0x2, 0xf, 0xc}, {0x4, 0x5, 0xc, 0x7}], 0x10, 0x3, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x3e0000}], 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/223, 0x26, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(r3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) pipe(&(0x7f0000000240)) 16.683432943s ago: executing program 4 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101001, 0x0) unlinkat(r0, &(0x7f0000002780)='./file1\x00', 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000740)=""/169, 0xa9, 0x0, &(0x7f0000000980)=""/248, 0xe8}}, 0xfffffffffffffc69) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f00000145c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x15, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x8fb3fcae0d59ebef, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0x3, 0x25}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000280)={0x0, &(0x7f0000001040)}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) 16.652449205s ago: executing program 2 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) ioctl$TCXONC(r6, 0x540a, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x800000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x14, 0x10}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 16.15824606s ago: executing program 4 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0xffffffffffffffff, 0x109701) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) (async) accept4(r2, 0x0, 0x0, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x0, 0x9fd8, 0x2, 0xffffffffffffffff, 0x800, '\x00', 0x0, r3, 0x3, 0x1, 0x1, 0x8, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r0, 0xffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) (async) mmap(&(0x7f0000298000/0x3000)=nil, 0x3000, 0x2, 0x28011, r4, 0x0) 16.068437947s ago: executing program 2 (id=1111): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000, 0x101, &(0x7f0000000040)=0x1) unshare(0x40480) syz_clone(0x80040180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0), 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0xf, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, 0x0, 0x185) syz_init_net_socket$ax25(0x3, 0x2, 0xce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5c, &(0x7f0000000040)=ANY=[], 0x0, 0x63, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, @void, @value}, 0x94) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$vsock_stream(0x28, 0x1, 0x0) 15.340367791s ago: executing program 2 (id=1112): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009508000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8=r1], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000400"/28], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5, 0x25, 0x12}, 0x14) 6.025599092s ago: executing program 35 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000180001000000ba0000000000001d01080005000d0001000000b36ce944537cdce7804e61bd8d2a21f5dfdf29a66e28cf72f0e3482380fc9d263048105a5495f8b22cf48552e3d9c0eec33b91447360e1d68aa60967d17c5306e058540c7217c0cce8d250a3168b8a4516f90938676f865e9d74365df163b949c3799eb9104826ab9bcc887bb680d9ed24a04b"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="be7824bd71b44222e2ed6599e1aa584c28c96d8cb878de786d18fa098e18b308f224d1a91cb455455a37432a39ca9224ea36f47afc87110cf29b68fcb0c31b", @ANYRESHEX=r6], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) 2.524213903s ago: executing program 36 (id=1105): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f00000000c0)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280802, 0x0) close_range(r9, r7, 0x0) 1.024210381s ago: executing program 37 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0xffffffffffffffff, 0x109701) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) (async) accept4(r2, 0x0, 0x0, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x0, 0x9fd8, 0x2, 0xffffffffffffffff, 0x800, '\x00', 0x0, r3, 0x3, 0x1, 0x1, 0x8, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r0, 0xffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) (async) mmap(&(0x7f0000298000/0x3000)=nil, 0x3000, 0x2, 0x28011, r4, 0x0) 0s ago: executing program 38 (id=1112): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009508000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES8=r1], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000400"/28], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5, 0x25, 0x12}, 0x14) kernel console output (not intermixed with test programs): ail_ex+0x497/0x5b0 [ 309.063488][T10840] ? fs_reclaim_acquire+0xae/0x150 [ 309.068619][T10840] should_failslab+0xc2/0x120 [ 309.073309][T10840] __kmalloc_node_noprof+0xd1/0x510 [ 309.078523][T10840] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 309.084003][T10840] __kvmalloc_node_noprof+0xad/0x1a0 [ 309.089305][T10840] page_pool_create_percpu+0x35d/0xad0 [ 309.094780][T10840] __veth_napi_enable_range+0x16f/0xac0 [ 309.100358][T10840] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 309.106439][T10840] ? mark_held_locks+0x9f/0xe0 [ 309.111227][T10840] ? __local_bh_enable_ip+0xa4/0x120 [ 309.116529][T10840] ? netif_napi_add_weight+0x5e4/0x860 [ 309.122006][T10840] ? __pfx_veth_poll+0x10/0x10 [ 309.126792][T10840] veth_napi_enable_range+0xc7/0x190 [ 309.132105][T10840] veth_set_features+0x1ee/0x2d0 [ 309.137056][T10840] ? __pfx_veth_set_features+0x10/0x10 [ 309.142535][T10840] __netdev_update_features+0x79f/0x1910 [ 309.148190][T10840] ? __might_fault+0x13b/0x190 [ 309.152978][T10840] ? __pfx___netdev_update_features+0x10/0x10 [ 309.159064][T10840] ? lock_acquire+0x2f/0xb0 [ 309.163588][T10840] ? __might_fault+0xe3/0x190 [ 309.168288][T10840] ? __might_fault+0xe3/0x190 [ 309.172993][T10840] dev_ethtool+0x1bc7/0x57e0 [ 309.177596][T10840] ? kernel_text_address+0x8d/0x100 [ 309.182800][T10840] ? __kernel_text_address+0xd/0x40 [ 309.188005][T10840] ? __pfx_dev_ethtool+0x10/0x10 [ 309.192952][T10840] ? hlock_class+0x4e/0x130 [ 309.197468][T10840] ? hlock_class+0x4e/0x130 [ 309.202240][T10840] ? mark_lock+0xb5/0xc60 [ 309.206581][T10840] ? __pfx_mark_lock+0x10/0x10 [ 309.211342][T10840] ? __pfx_mark_lock+0x10/0x10 [ 309.216103][T10840] ? __pfx___lock_acquire+0x10/0x10 [ 309.221297][T10840] ? kasan_save_stack+0x42/0x60 [ 309.226141][T10840] ? kasan_save_stack+0x33/0x60 [ 309.230988][T10840] ? kasan_save_track+0x14/0x30 [ 309.235830][T10840] ? kasan_save_free_info+0x3b/0x60 [ 309.241028][T10840] ? __kasan_slab_free+0x51/0x70 [ 309.246045][T10840] ? kfree+0x14f/0x4b0 [ 309.250113][T10840] ? hlock_class+0x4e/0x130 [ 309.254613][T10840] ? __lock_acquire+0xcc5/0x3c40 [ 309.259552][T10840] ? __pfx___lock_acquire+0x10/0x10 [ 309.264747][T10840] ? __pfx___lock_acquire+0x10/0x10 [ 309.269940][T10840] ? avc_has_extended_perms+0x902/0xf70 [ 309.275492][T10840] ? find_held_lock+0x2d/0x110 [ 309.280256][T10840] ? dev_load+0x8e/0x240 [ 309.284495][T10840] ? __pfx_lock_release+0x10/0x10 [ 309.289514][T10840] ? trace_lock_acquire+0x14e/0x1f0 [ 309.294719][T10840] ? full_name_hash+0xbc/0x110 [ 309.299488][T10840] dev_ioctl+0x2a2/0x10c0 [ 309.303821][T10840] sock_do_ioctl+0x19e/0x280 [ 309.308409][T10840] ? __pfx_sock_do_ioctl+0x10/0x10 [ 309.313527][T10840] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 309.320031][T10840] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 309.326535][T10840] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 309.333397][T10840] sock_ioctl+0x228/0x6c0 [ 309.337812][T10840] ? __pfx_sock_ioctl+0x10/0x10 [ 309.342670][T10840] ? selinux_file_ioctl+0x180/0x270 [ 309.347868][T10840] ? selinux_file_ioctl+0xb4/0x270 [ 309.352988][T10840] ? __pfx_sock_ioctl+0x10/0x10 [ 309.357839][T10840] __x64_sys_ioctl+0x190/0x200 [ 309.362607][T10840] do_syscall_64+0xcd/0x250 [ 309.367286][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.373177][T10840] RIP: 0033:0x7f115397fed9 [ 309.377608][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.397212][T10840] RSP: 002b:00007f115481a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.405623][T10840] RAX: ffffffffffffffda RBX: 00007f1153b45fa0 RCX: 00007f115397fed9 [ 309.413594][T10840] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 309.421555][T10840] RBP: 00007f115481a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 309.429521][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.437491][T10840] R13: 0000000000000000 R14: 00007f1153b45fa0 R15: 00007fffeda78998 [ 309.445468][T10840] [ 309.602002][T10840] page_pool_create_percpu() gave up with errno -12 [ 309.614005][T10840] veth1_vlan: set_features() failed (-12); wanted 0x000061164fdd49e9, left 0x000061164fdd09e9 [ 309.678721][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.698172][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.873257][T10855] overlayfs: failed to resolve './file1': -2 [ 309.986645][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.990222][T10856] IPVS: set_ctl: invalid protocol: 11612 172.30.1.5:20003 [ 310.448845][T10820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.469391][T10820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.564680][ T5871] gspca_vc032x: reg_w err -71 [ 310.572703][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.577995][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.583362][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 310.613181][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.620774][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.626659][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.632906][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.638714][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.648853][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.660713][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.667127][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.675347][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.680796][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.708188][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.722043][ T5870] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 310.736959][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.752178][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 310.760192][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 310.772529][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.792300][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.801322][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.815474][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.825060][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.833582][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.839611][ T9] usb 5-1: Product: syz [ 310.848705][ T5871] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.855504][ T9] usb 5-1: Manufacturer: syz [ 310.866969][ T9] usb 5-1: SerialNumber: syz [ 310.874558][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.885956][ T5871] gspca_vc032x: Unknown sensor... [ 310.909329][ T5871] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 310.917891][ T9] usb 5-1: config 0 descriptor?? [ 310.931029][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 310.953624][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 310.960725][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 310.961747][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.974433][ T5871] usb 3-1: USB disconnect, device number 30 [ 311.032505][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.115866][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 311.165019][ T5870] usb 6-1: SerialNumber: syz [ 311.223845][ T5870] usb 6-1: bad CDC descriptors [ 311.442481][T10860] IPVS: length: 99 != 24 [ 312.199906][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.208083][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.222463][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 312.222476][ T29] audit: type=1400 audit(1733687491.273:979): avc: denied { read } for pid=10859 comm="syz.5.834" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.259572][ T29] audit: type=1400 audit(1733687491.273:980): avc: denied { open } for pid=10859 comm="syz.5.834" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.292133][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 312.356541][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 312.407710][ T29] audit: type=1400 audit(1733687492.123:981): avc: denied { read write } for pid=10908 comm="syz.3.839" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 312.443103][ T29] audit: type=1400 audit(1733687492.123:982): avc: denied { open } for pid=10908 comm="syz.3.839" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 312.909695][T10919] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 312.943180][ T970] kernel write not supported for file 543/net/vlan/vlan0 (pid: 970 comm: kworker/0:2) [ 313.226083][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.258631][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.284842][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.353515][ T5825] usb 6-1: USB disconnect, device number 13 [ 313.836329][ T9] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 313.844404][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 313.853035][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 313.859660][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 313.866549][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 313.880612][ T9] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 313.994452][ T9] usb 5-1: USB disconnect, device number 35 [ 314.331465][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.045308][T10977] overlay: Unknown parameter 'dont_appraise' [ 315.272266][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.355127][T10986] xt_CONNSECMARK: invalid mode: 0 [ 315.412078][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.146711][ T29] audit: type=1400 audit(1733687495.833:983): avc: denied { ioctl } for pid=10991 comm="syz.0.854" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 316.366626][T11007] trusted_key: encrypted_key: master key parameter 'PruneCalled' is invalid [ 316.767279][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.473587][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.483364][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.489634][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.498493][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.547027][T11020] Bluetooth: MGMT ver 1.23 [ 317.709593][ T29] audit: type=1400 audit(1733687497.423:984): avc: denied { wake_alarm } for pid=11019 comm="syz.0.859" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.825043][T11037] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 317.833018][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.947139][ T29] audit: type=1400 audit(1733687497.663:985): avc: denied { set_context_mgr } for pid=11034 comm="syz.5.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 318.119910][ T29] audit: type=1400 audit(1733687497.803:986): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 318.238051][T11047] binder: 11034:11047 ioctl c0306201 20000580 returned -22 [ 318.758332][T11048] warning: `syz.4.863' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 318.845302][ T5824] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 318.878660][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.904216][T11057] loop2: detected capacity change from 0 to 7 [ 318.972124][T11057] Dev loop2: unable to read RDB block 7 [ 318.973989][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 319.010868][T11057] loop2: unable to read partition table [ 319.011326][T11060] syz_tun: entered promiscuous mode [ 319.042766][T11057] loop2: partition table beyond EOD, truncated [ 319.098894][T11057] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.117574][ T5824] Bluetooth: hci0: command 0x0405 tx timeout [ 319.946173][ T47] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 319.951094][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.143651][ T47] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 320.152060][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 320.162809][ T47] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 320.187899][ T47] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 320.212913][ T47] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 320.229077][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.256831][ T47] usb 6-1: Product: syz [ 320.268624][ T47] usb 6-1: Manufacturer: syz [ 320.281599][ T47] usb 6-1: SerialNumber: syz [ 320.519536][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.528589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.544652][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.582995][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.591382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.705605][T11101] futex_wake_op: syz.0.873 tries to shift op by -1; fix this program [ 320.737633][ T6252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.746717][ T970] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 321.002214][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 321.015916][ T970] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 321.051218][ T970] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 321.071697][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.138226][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.148299][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.167971][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.191978][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 321.198080][ T970] usb 3-1: config 0 has no interface number 0 [ 321.215064][ T970] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.227360][ T970] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 321.238463][T11075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.246880][ T970] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 321.259078][ T970] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 321.268499][ T970] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 321.276936][T11075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.278136][ T970] usb 3-1: Product: syz [ 321.311853][ T47] cdc_ncm 6-1:1.0: bind() failure [ 321.348503][ T970] usb 3-1: config 0 descriptor?? [ 321.350817][ T47] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 321.371376][ T47] cdc_ncm 6-1:1.1: bind() failure [ 321.376736][T11092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 321.435113][ T47] usb 6-1: USB disconnect, device number 14 [ 322.008269][ T970] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input20 [ 322.082646][T11159] xt_nat: multiple ranges no longer supported [ 322.171011][ T29] audit: type=1400 audit(1733687501.883:987): avc: denied { read } for pid=11161 comm="syz.3.883" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.269613][ T29] audit: type=1400 audit(1733687501.943:988): avc: denied { open } for pid=11161 comm="syz.3.883" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.294948][T11168] rdma_op ffff888012ae99f0 conn xmit_rdma 0000000000000000 [ 322.392152][ T5870] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 322.546026][ T5870] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 322.892367][ T5870] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.906000][ T5834] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 322.915615][ T5834] Bluetooth: hci2: Injecting HCI hardware error event [ 322.929962][ T5834] Bluetooth: hci2: hardware error 0x00 [ 322.943287][ T5870] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 322.953731][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.970767][ T5870] usb 6-1: config 0 descriptor?? [ 323.957657][ T5870] kernel write not supported for file bpf-map (pid: 5870 comm: kworker/1:6) [ 323.959222][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.984777][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.006628][ T5870] net_ratelimit: 86 callbacks suppressed [ 325.006643][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.052286][ T5834] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 325.086104][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.183701][ T8] usb 3-1: USB disconnect, device number 31 [ 325.183760][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 326.170835][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.551140][ T970] usb 6-1: USB disconnect, device number 15 [ 326.666159][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 326.832034][ T8] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 326.924613][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 327.002118][ T970] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 327.022156][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 327.029477][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 327.050665][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.066869][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.078072][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.103311][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.121086][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.137401][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.169437][ T970] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.178873][ T970] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 327.195640][ T970] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.215814][ T970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 327.248738][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.290821][ T970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 327.311128][T11233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.320313][ T970] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.340610][ T970] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.352964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.375105][ T8] usb 4-1: usb_control_msg returned -32 [ 327.381800][ T970] usb 6-1: Product: syz [ 327.396102][ T8] usbtmc 4-1:16.0: can't read capabilities [ 327.409492][ T970] usb 6-1: Manufacturer: syz [ 327.441961][ T970] cdc_wdm 6-1:1.0: skipping garbage [ 327.465774][ T970] cdc_wdm 6-1:1.0: skipping garbage [ 327.521491][ T970] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 327.537681][ T970] cdc_wdm 6-1:1.0: Unknown control protocol [ 327.708581][ T29] audit: type=1400 audit(1733687507.423:989): avc: denied { ioctl } for pid=11253 comm="syz.2.897" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 327.748976][T11255] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 327.763665][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.947251][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.992836][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.070472][ T1091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.072172][T11262] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 328.096038][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.121455][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.324060][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.665668][ T29] audit: type=1400 audit(1733687508.373:990): avc: denied { setopt } for pid=11218 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.361612][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 329.457227][T11287] Invalid ELF header magic: != ELF [ 329.531339][ T29] audit: type=1400 audit(1733687509.173:991): avc: denied { module_load } for pid=11271 comm="syz.4.899" path="/sys/kernel/notes" dev="sysfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 329.950027][ T8] usb 4-1: USB disconnect, device number 50 [ 330.051220][ T5870] usb 6-1: USB disconnect, device number 16 [ 330.189510][T11330] xt_limit: Overflow, try lower: 0/0 [ 330.317432][ T29] audit: type=1400 audit(1733687510.033:992): avc: denied { name_bind } for pid=11331 comm="syz.3.902" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 330.378834][T11338] syzkaller1: entered promiscuous mode [ 330.384823][T11338] syzkaller1: entered allmulticast mode [ 331.085893][ T8] net_ratelimit: 1 callbacks suppressed [ 331.085911][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.180625][T11359] Device name cannot be null; rc = [-22] [ 331.650331][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.775500][ T29] audit: type=1400 audit(1733687511.473:993): avc: denied { read } for pid=11357 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.809041][ T29] audit: type=1400 audit(1733687511.523:994): avc: denied { mounton } for pid=11375 comm="syz.5.909" path="/92/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 331.832759][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.011991][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 332.022081][ T47] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 332.100953][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.5.910'. [ 332.188330][T11391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.195662][T11391] IPv6: NLM_F_CREATE should be set when creating new route [ 332.202913][T11391] IPv6: NLM_F_CREATE should be set when creating new route [ 332.220941][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 332.238261][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.299221][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.329725][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.378410][ T47] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 332.419718][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.475964][ T47] usb 1-1: config 0 descriptor?? [ 332.483001][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.503279][ T8] usb 5-1: device descriptor read/64, error -71 [ 332.706101][ T29] audit: type=1400 audit(1733687512.423:995): avc: denied { append } for pid=11362 comm="syz.0.908" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 332.748084][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 332.900437][T11413] netlink: 'syz.2.914': attribute type 3 has an invalid length. [ 332.902018][ T8] usb 5-1: device descriptor read/64, error -71 [ 333.022353][ T8] usb usb5-port1: attempt power cycle [ 333.362355][ T8] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 333.414962][ T8] usb 5-1: device descriptor read/8, error -71 [ 333.477922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.719974][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 333.982003][ T8] usb 5-1: device not accepting address 39, error -71 [ 333.989317][ T8] usb usb5-port1: unable to enumerate USB device [ 334.072111][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 334.080232][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 334.092967][ T5870] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 334.131449][ T47] usb 1-1: USB disconnect, device number 41 [ 334.198043][T11453] xt_nat: multiple ranges no longer supported [ 334.284287][ T29] audit: type=1400 audit(1733687513.993:996): avc: denied { setattr } for pid=11455 comm="syz.5.921" name="NETLINK" dev="sockfs" ino=24182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 334.292003][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 334.314935][ T5870] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 334.323303][ T5870] usb 4-1: config 0 has no interface number 0 [ 334.329491][ T5870] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 334.353786][ T5870] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 334.383485][ T5870] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 334.393157][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 334.401288][ T5870] usb 4-1: Product: syz [ 334.426554][ T5870] usb 4-1: SerialNumber: syz [ 334.443413][ T5870] usb 4-1: config 0 descriptor?? [ 334.450736][ T5870] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 334.464868][ T5870] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input21 [ 334.559649][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.677367][T11430] tmpfs: Bad value for 'mpol' [ 334.711107][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.712253][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.782469][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.843211][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.861841][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.920928][ T29] audit: type=1400 audit(1733687514.633:997): avc: denied { connect } for pid=11474 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.039347][ T29] audit: type=1400 audit(1733687514.633:998): avc: denied { write } for pid=11474 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.060175][ T29] audit: type=1400 audit(1733687514.643:999): avc: denied { read } for pid=11474 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.092381][ T29] audit: type=1400 audit(1733687514.803:1000): avc: denied { write } for pid=11429 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.100372][ T5870] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 335.121091][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 335.130456][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 335.133469][ T9] usb 4-1: USB disconnect, device number 51 [ 335.137406][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 335.152884][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.180915][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 335.285062][ T970] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 335.306473][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 335.317080][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.347269][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.367446][ T5870] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 335.389055][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.430662][ T5870] usb 1-1: config 0 descriptor?? [ 335.451570][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.490679][ T970] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 335.520816][ T970] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 335.550533][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.571024][ T970] usb 3-1: config 0 descriptor?? [ 335.600265][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.608660][ T970] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 335.626420][ T970] dvb-usb: bulk message failed: -22 (3/0) [ 335.648358][ T970] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 335.669452][ T970] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 335.682075][ T970] usb 3-1: media controller created [ 335.694154][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.725476][ T970] dvb-usb: bulk message failed: -22 (6/0) [ 335.747198][ T970] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 335.764625][ T970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 335.795434][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.812276][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.833103][ T970] dvb-usb: schedule remote query interval to 150 msecs. [ 335.853318][ T5870] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 335.857642][ T970] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 335.929246][ T970] usb 3-1: USB disconnect, device number 32 [ 335.957775][ T970] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 336.197084][ T5870] ft260 0003:0403:6030.000D: chip code: 5e81 abf2 [ 336.469642][ T5870] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 336.636911][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.670701][ T5870] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 336.718678][ T5870] ft260 0003:0403:6030.000D: i2c bus error: 0x3e [ 336.949302][ T5834] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 337.661075][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.676902][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.794108][ T29] audit: type=1400 audit(1733687517.513:1001): avc: denied { connect } for pid=11551 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 337.838470][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.808978][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.887813][ T5870] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 339.116540][ T5870] usb 1-1: USB disconnect, device number 42 [ 339.189365][ T29] audit: type=1400 audit(1733687518.903:1002): avc: denied { accept } for pid=11576 comm="syz.2.933" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.848648][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.252066][ T5870] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 340.786494][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.797701][ T5870] usb 1-1: not running at top speed; connect to a high speed hub [ 340.812787][ T5870] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 340.821635][ T5870] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 340.850610][ T5870] usb 1-1: config 1 has no interface number 1 [ 340.872790][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.880937][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.893780][ T5870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.902983][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.910959][ T5870] usb 1-1: Product: syz [ 340.930544][ T5870] usb 1-1: Manufacturer: syz [ 340.942205][ T5870] usb 1-1: SerialNumber: syz [ 341.042321][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 341.234663][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 341.251502][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.311855][ T9] usb 5-1: config 0 descriptor?? [ 341.421972][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 341.653702][ T9] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 341.757886][ T9] hackrf 5-1:0.0: Could not detect board [ 341.766620][ T9] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 341.767761][ T8] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 341.799829][ T9] usb 5-1: USB disconnect, device number 40 [ 341.800099][T11566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.806954][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.822405][ T8] usb 6-1: Product: syz [ 341.826577][ T8] usb 6-1: Manufacturer: syz [ 341.831193][ T8] usb 6-1: SerialNumber: syz [ 341.842263][ T8] usb 6-1: config 0 descriptor?? [ 341.862354][T11566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.903661][ T5870] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 341.918811][ T5870] usb 1-1: 2:1 : sample bitwidth 252 in over sample bytes 8 [ 341.928542][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.948251][ T5870] usb 1-1: 2:1 : unsupported sample bitwidth 252 in 8 bytes [ 341.991559][ T5870] usb 1-1: USB disconnect, device number 43 [ 342.244972][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.447104][ T29] audit: type=1400 audit(1733687522.163:1003): avc: denied { write } for pid=11677 comm="syz.3.943" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 342.782055][ T5867] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 342.875396][ T970] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 343.052304][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 343.072497][ T970] usb 3-1: config 5 has an invalid interface number: 47 but max is 0 [ 343.100608][ T970] usb 3-1: config 5 has an invalid interface number: 22 but max is 0 [ 343.118870][ T8] usb 6-1: f81604_read: reg: 100e failed: -EREMOTEIO [ 343.235303][ T970] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 1 [ 343.277785][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.300765][ T970] usb 3-1: config 5 has no interface number 0 [ 343.307460][ T970] usb 3-1: config 5 has no interface number 1 [ 343.314081][ T970] usb 3-1: config 5 interface 47 altsetting 55 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 343.329637][ T8] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 343.343771][ T8] usb 6-1: USB disconnect, device number 17 [ 343.369515][ T970] usb 3-1: config 5 interface 47 altsetting 55 has an invalid descriptor for endpoint zero, skipping [ 343.390538][ T8] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 343.403673][ T970] usb 3-1: config 5 interface 47 altsetting 55 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 343.415150][ T970] usb 3-1: config 5 interface 47 altsetting 55 endpoint 0xC has invalid maxpacket 536, setting to 64 [ 343.426529][ T970] usb 3-1: config 5 interface 47 altsetting 55 has 5 endpoint descriptors, different from the interface descriptor's value: 13 [ 343.457234][ T970] usb 3-1: too many endpoints for config 5 interface 22 altsetting 218: 229, using maximum allowed: 30 [ 343.499152][ T970] usb 3-1: config 5 interface 22 altsetting 218 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 343.512664][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 343.520722][ T8] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 343.546463][ T970] usb 3-1: config 5 interface 22 altsetting 218 has a duplicate endpoint with address 0x8, skipping [ 343.553999][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 343.562862][ T970] usb 3-1: config 5 interface 22 altsetting 218 has an invalid descriptor for endpoint zero, skipping [ 343.569078][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 343.590685][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.605588][ T5867] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 343.618038][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.629614][ T970] usb 3-1: config 5 interface 22 altsetting 218 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 343.653870][ T970] usb 3-1: config 5 interface 22 altsetting 218 has a duplicate endpoint with address 0xC, skipping [ 343.687076][ T970] usb 3-1: config 5 interface 22 altsetting 218 has 8 endpoint descriptors, different from the interface descriptor's value: 229 [ 343.692461][ T5867] usb 5-1: config 0 descriptor?? [ 343.702759][ T970] usb 3-1: config 5 interface 47 has no altsetting 0 [ 343.719774][ T970] usb 3-1: config 5 interface 22 has no altsetting 0 [ 343.729514][ T970] usb 3-1: New USB device found, idVendor=5064, idProduct=0ada, bcdDevice=4b.13 [ 343.765196][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.777100][ T970] usb 3-1: Product: syz [ 343.781372][ T970] usb 3-1: Manufacturer: syz [ 343.789022][ T970] usb 3-1: SerialNumber: syz [ 343.922424][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.187930][ T5867] koneplus 0003:1E7D:2E22.000E: item fetching failed at offset 0/2 [ 344.200260][ T5867] koneplus 0003:1E7D:2E22.000E: parse failed [ 344.232481][ T5867] koneplus 0003:1E7D:2E22.000E: probe with driver koneplus failed with error -22 [ 344.316581][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.452999][ T5867] usb 5-1: USB disconnect, device number 41 [ 345.082859][ T970] cdc_eem 3-1:5.47: probe with driver cdc_eem failed with error -22 [ 345.107621][ T970] usb 3-1: USB disconnect, device number 33 [ 345.222875][ T29] audit: type=1326 audit(1733687524.903:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5f7fed9 code=0x7ffc0000 [ 345.682395][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.703953][ T29] audit: type=1326 audit(1733687524.903:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11748 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b5f7fed9 code=0x7ffc0000 [ 345.902828][T11764] netlink: 'syz.2.953': attribute type 7 has an invalid length. [ 345.910513][T11764] netlink: 208140 bytes leftover after parsing attributes in process `syz.2.953'. [ 346.293402][T11800] program syz.2.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.417485][T11805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.426439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.829444][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.953959][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.193803][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.212481][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.222826][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.242369][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.868467][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.957844][ T29] audit: type=1400 audit(1733687527.673:1006): avc: denied { bind } for pid=11842 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 348.784402][ T29] audit: type=1400 audit(1733687528.463:1007): avc: denied { bind } for pid=11869 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 349.485863][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.052881][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.385491][T11897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.980'. [ 350.444951][ T5867] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 350.622131][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 350.628958][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.640967][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.657599][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.688707][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.697582][ T5867] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 350.708469][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.718298][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.726300][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.739008][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.749637][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.757675][ T5867] usb 1-1: config 0 descriptor?? [ 350.763372][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.775548][ T29] audit: type=1400 audit(1733687530.493:1008): avc: denied { mounton } for pid=11910 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 350.804103][T11923] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.817396][T11923] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.826926][T11923] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.836288][T11923] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.845689][T11923] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.855300][T11923] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.929446][ T29] audit: type=1400 audit(1733687530.643:1009): avc: denied { nlmsg_read } for pid=11933 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.952286][ T8] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 350.953434][ T29] audit: type=1400 audit(1733687530.663:1010): avc: denied { read } for pid=11933 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.985375][ T970] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 351.081970][ T8] usb 4-1: device descriptor read/64, error -71 [ 351.171087][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 351.180526][ T970] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 351.195016][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.208521][T11910] chnl_net:caif_netlink_parms(): no params data found [ 351.217680][ T970] usb 3-1: config 0 descriptor?? [ 351.430266][ T5867] corsair 0003:1B1C:1B02.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 351.723559][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.734594][ T970] gspca_main: sq930x-2.14.0 probing 041e:403c [ 351.802376][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 351.833600][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.841216][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.848559][T11910] bridge_slave_0: entered allmulticast mode [ 351.857114][T11910] bridge_slave_0: entered promiscuous mode [ 351.864895][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.872133][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.879363][T11910] bridge_slave_1: entered allmulticast mode [ 351.887384][T11910] bridge_slave_1: entered promiscuous mode [ 351.917579][T11910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.929040][T11910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.943721][ T8] usb 4-1: device descriptor read/64, error -71 [ 351.980873][T11910] team0: Port device team_slave_0 added [ 351.989269][T11910] team0: Port device team_slave_1 added [ 352.044417][T11910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.051385][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.078055][T11910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.082551][ T8] usb usb4-port1: attempt power cycle [ 352.104279][T11910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.120978][T11910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.154367][T11910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.225200][T11910] hsr_slave_0: entered promiscuous mode [ 352.231571][T11910] hsr_slave_1: entered promiscuous mode [ 352.236734][ T29] audit: type=1400 audit(1733687531.943:1011): avc: denied { append } for pid=11878 comm="syz.0.974" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 352.256965][ T5867] usb 1-1: USB disconnect, device number 44 [ 352.281676][T11910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.298720][T11910] Cannot create hsr debugfs directory [ 352.452661][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 352.492286][T11910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.497951][ T8] usb 4-1: device descriptor read/8, error -71 [ 352.507207][T11910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.518364][T11910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.530154][T11910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 352.584486][T11910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.600893][T11910] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.610654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.617779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.631026][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.638138][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.642075][ T47] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 352.685207][T11910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.760441][ T970] gspca_sq930x: ucbus_write failed -71 [ 352.767106][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 352.784493][ T970] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 352.799446][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.813087][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 352.813240][ T970] usb 3-1: USB disconnect, device number 34 [ 352.825990][ T8] usb 4-1: device descriptor read/8, error -71 [ 352.826822][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 352.860271][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.867527][ T47] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.880046][ T47] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.882184][ T5834] Bluetooth: hci0: command tx timeout [ 352.905561][ T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.941558][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.954096][ T8] usb usb4-port1: unable to enumerate USB device [ 352.956230][ T6252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.969378][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.978418][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.011396][ T47] usb 5-1: Product: syz [ 353.021588][ T47] usb 5-1: Manufacturer: syz [ 353.028804][ T47] usb 5-1: SerialNumber: syz [ 353.116003][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.681074][T11910] veth0_vlan: entered promiscuous mode [ 353.708744][ T47] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 353.715435][T11910] veth1_vlan: entered promiscuous mode [ 353.902513][ T8] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 353.967899][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 354.023158][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.145019][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 354.211368][T11910] veth0_macvtap: entered promiscuous mode [ 354.223372][ T8] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.ef [ 354.251328][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.263166][T11910] veth1_macvtap: entered promiscuous mode [ 354.287771][ T8] usb 1-1: SerialNumber: syz [ 354.307029][ T8] usb 1-1: config 0 descriptor?? [ 354.319665][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.360326][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.370540][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.381251][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.399611][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.439724][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.462046][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.481929][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.491793][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.510831][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.529299][T11910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.571099][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.612012][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.621966][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.640574][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.661572][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.682945][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.704605][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 354.715988][T11910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.733819][T11910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.746511][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.752790][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.772326][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.783859][T11910] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.818830][T11910] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.847985][T11910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.866585][ T47] usb 5-1: USB disconnect, device number 42 [ 354.870836][T11910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.952222][ T5834] Bluetooth: hci0: command tx timeout [ 355.084460][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.116924][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.140489][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.198938][ T6252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.215487][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.235158][ T6252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.339777][T12398] netlink: 180 bytes leftover after parsing attributes in process `syz.2.997'. [ 355.365243][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 355.942294][ T5867] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 356.176735][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.184876][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.283995][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 356.299370][ T5867] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.320371][ T5867] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.356989][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 356.366596][ T29] audit: type=1400 audit(1733687536.073:1012): avc: denied { ioctl } for pid=12422 comm="syz.6.1002" path="socket:[25562]" dev="sockfs" ino=25562 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 356.370669][ T5867] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 356.410869][ T5867] usb 3-1: Product: syz [ 356.415908][ T5867] usb 3-1: Manufacturer: syz [ 356.450176][ T5867] hub 3-1:4.0: USB hub found [ 356.451974][T12423] input: syz1 as /devices/virtual/input/input23 [ 356.651055][ T5867] hub 3-1:4.0: 2 ports detected [ 356.695300][ T5153] usb 1-1: USB disconnect, device number 45 [ 356.822573][ T29] audit: type=1400 audit(1733687536.543:1013): avc: denied { ioctl } for pid=12448 comm="syz.0.1004" path="socket:[26237]" dev="sockfs" ino=26237 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 356.861003][T12451] fuse: Unknown parameter 'growp_id' [ 357.174305][ T5834] Bluetooth: hci0: command tx timeout [ 357.191933][ T29] audit: type=1400 audit(1733687536.893:1014): avc: denied { setopt } for pid=12457 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.236850][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.484680][ T29] audit: type=1400 audit(1733687537.203:1015): avc: denied { bind } for pid=12474 comm="syz.6.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.505392][ T29] audit: type=1400 audit(1733687537.223:1016): avc: denied { connect } for pid=12474 comm="syz.6.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.525413][ T5869] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 357.554942][ T29] audit: type=1400 audit(1733687537.253:1017): avc: denied { accept } for pid=12474 comm="syz.6.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.766882][ T29] audit: type=1400 audit(1733687537.483:1018): avc: denied { read } for pid=12474 comm="syz.6.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.833176][ T5869] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 357.849667][ T29] audit: type=1400 audit(1733687537.533:1019): avc: denied { write } for pid=12474 comm="syz.6.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 357.874925][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.885230][ T5869] usb 4-1: config 0 has no interface number 0 [ 357.891360][ T5869] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 357.907430][ T5869] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.015426][ T5869] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 358.118595][ T5867] hub 3-1:4.0: activate --> -90 [ 358.120804][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.153520][ T5869] usb 4-1: Product: syz [ 358.158004][ T5869] usb 4-1: Manufacturer: syz [ 358.163378][ T5869] usb 4-1: SerialNumber: syz [ 358.414586][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.436826][ T5869] usb 4-1: config 0 descriptor?? [ 358.752891][ T1091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.762345][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.776497][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.793722][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.962761][ T970] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 358.963684][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.970238][ T970] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 358.998192][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 359.192191][ T5834] Bluetooth: hci0: command tx timeout [ 359.192310][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.209621][ T9] usb 3-1: USB disconnect, device number 35 [ 359.212538][ T5867] usb 3-1-port2: config error [ 359.443519][ T5869] usb 4-1: USB disconnect, device number 56 [ 359.458757][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.638122][T12544] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1013'. [ 359.938046][T12570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37461 sclass=netlink_route_socket pid=12570 comm=syz.2.1015 [ 360.014460][T12570] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 360.022153][ T5869] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 360.116029][T12565] Invalid source name [ 360.194525][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 360.212262][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.252575][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.274920][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 360.345300][ T5869] usb 4-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 360.363781][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.390074][ T5869] usb 4-1: config 0 descriptor?? [ 360.484943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.794048][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 360.962130][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 360.970119][ T9] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 360.980554][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.021634][ T9] usb 7-1: config 0 descriptor?? [ 361.070404][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 361.100139][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.112315][ T970] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 361.118419][ T970] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 361.132067][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.136060][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.516145][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.599940][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 361.618622][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 361.668797][ T5869] usb 4-1: USB disconnect, device number 57 [ 362.232282][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.559556][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.592663][T12599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12599 comm=syz.6.1019 [ 363.069348][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 363.649519][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.673492][T12599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12599 comm=syz.6.1019 [ 363.719265][ T9] gspca_vc032x: reg_w err -71 [ 363.724751][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.730123][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.735485][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.740812][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.746157][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.751442][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.756938][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.762266][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.767560][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.772895][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.778190][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.783705][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.788998][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.794474][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.799765][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.805078][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.810363][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.815711][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.821040][ T9] gspca_vc032x: Unknown sensor... [ 363.826149][ T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 363.890592][ T9] usb 7-1: USB disconnect, device number 2 [ 363.992291][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.065308][ T970] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 364.071428][ T970] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 364.212037][ T6913] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 364.496471][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.515341][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.538431][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.662757][ T6913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.673733][ T6913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.683561][ T6913] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 364.692672][ T6913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.733349][ T6913] usb 3-1: config 0 descriptor?? [ 364.755517][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.166614][ T6913] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 365.232239][ T6913] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 365.275546][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.362039][ T6913] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 365.683687][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.701973][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 365.867339][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.198922][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.209480][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.347806][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.405294][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.590631][ T6913] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 366.603611][ T6913] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 366.781582][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 366.815890][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.857041][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 367.224399][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.410347][T12785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.437104][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.452458][ T5153] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 367.469605][T12810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.494265][T12810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.512117][T12810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.527909][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.537254][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 367.544637][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.615096][ T5153] usb 7-1: Using ep0 maxpacket: 8 [ 367.625014][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.660923][ T5153] usb 7-1: config 0 has an invalid interface number: 45 but max is 0 [ 367.673248][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.680667][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.681966][ T5153] usb 7-1: config 0 has no interface number 0 [ 367.690166][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.703679][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 367.732934][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.775562][ T6913] usb 3-1: USB disconnect, device number 36 [ 367.903398][ T12] bridge_slave_1: left allmulticast mode [ 367.909245][ T12] bridge_slave_1: left promiscuous mode [ 367.921354][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.147661][ T12] bridge_slave_0: left allmulticast mode [ 368.161333][ T12] bridge_slave_0: left promiscuous mode [ 368.171527][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.579104][ T5153] usb 7-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=4b.42 [ 368.588269][ T5153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.596420][ T5153] usb 7-1: Product: syz [ 368.600598][ T5153] usb 7-1: Manufacturer: syz [ 368.605344][ T5153] usb 7-1: SerialNumber: syz [ 368.614829][ T5153] usb 7-1: config 0 descriptor?? [ 369.204250][T12886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.516406][ T8] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 369.530841][ T5869] net_ratelimit: 2 callbacks suppressed [ 369.530858][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.642055][ T6913] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 369.702169][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 369.709351][ T8] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 369.718549][ T8] usb 5-1: config 0 has no interface number 0 [ 369.727867][ T8] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 369.732508][ T5867] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 369.748536][ T8] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 369.760611][ T8] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 369.770306][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.783857][ T8] usb 5-1: Product: syz [ 369.788110][ T8] usb 5-1: Manufacturer: syz [ 369.795261][ T8] usb 5-1: SerialNumber: syz [ 369.804375][ T6913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.820803][ T8] usb 5-1: config 0 descriptor?? [ 369.829762][ T6913] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 369.839292][ T5834] Bluetooth: hci4: command tx timeout [ 369.849998][T12893] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.858439][T12893] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.865147][ T6913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.877264][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.886643][ T6913] usb 4-1: config 0 descriptor?? [ 369.927396][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 370.008259][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.025455][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.037102][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.046937][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 370.056673][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.099170][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.102291][ T8] usb 5-1: USB disconnect, device number 43 [ 370.108496][ T5867] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.122600][ T5867] usb 3-1: Manufacturer: syz [ 370.158575][ T5867] usb 3-1: config 0 descriptor?? [ 370.184947][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.203236][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.218183][ T12] bond0 (unregistering): Released all slaves [ 370.234220][ T1091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.243474][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.252112][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.338264][ T6913] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 370.382328][ T5153] ums-freecom 7-1:0.45: USB Mass Storage device detected [ 370.414758][ T6913] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input25 [ 370.514280][ T5153] usb 7-1: USB disconnect, device number 3 [ 370.572109][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.731627][ T6913] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 370.793831][ T6913] usb 4-1: USB disconnect, device number 58 [ 370.844648][T13079] netlink: 'syz.4.1053': attribute type 21 has an invalid length. [ 370.862806][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 370.917050][T12809] chnl_net:caif_netlink_parms(): no params data found [ 371.131975][ T5867] rc_core: IR keymap rc-hauppauge not found [ 371.138784][ T5867] Registered IR keymap rc-empty [ 371.147010][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.172213][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.200440][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 371.223158][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 371.247605][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.316261][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.404719][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.523064][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.530537][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.562270][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.582443][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.603790][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.606799][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.622459][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.674025][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.712416][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.755242][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.771817][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.785323][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.863712][ T5867] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 371.891110][ T5867] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 371.913127][ T5834] Bluetooth: hci4: command tx timeout [ 372.173621][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.180734][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.188204][T12809] bridge_slave_0: entered allmulticast mode [ 372.205757][T12809] bridge_slave_0: entered promiscuous mode [ 372.237642][ T12] hsr_slave_0: left promiscuous mode [ 372.292023][ T12] hsr_slave_1: left promiscuous mode [ 372.306442][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.332046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.364972][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.390665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.554871][ T8] usb 3-1: USB disconnect, device number 37 [ 372.695153][ T12] veth1_macvtap: left promiscuous mode [ 372.749495][ T12] veth0_macvtap: left promiscuous mode [ 372.829995][ T12] veth1_vlan: left promiscuous mode [ 372.866417][ T12] veth0_vlan: left promiscuous mode [ 373.661483][ T29] audit: type=1400 audit(1733687553.363:1020): avc: denied { write } for pid=13222 comm="syz.2.1060" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 373.684715][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.916092][T13228] FAULT_INJECTION: forcing a failure. [ 373.916092][T13228] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 373.930360][T13228] CPU: 0 UID: 0 PID: 13228 Comm: syz.6.1059 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 373.941143][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.951206][T13228] Call Trace: [ 373.954483][T13228] [ 373.957422][T13228] dump_stack_lvl+0x16c/0x1f0 [ 373.962122][T13228] should_fail_ex+0x497/0x5b0 [ 373.966799][T13228] _copy_to_user+0x32/0xd0 [ 373.971204][T13228] simple_read_from_buffer+0xd0/0x160 [ 373.976580][T13228] proc_fail_nth_read+0x198/0x270 [ 373.981612][T13228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.987147][T13228] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 373.993306][T13228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.998869][T13228] vfs_read+0x1df/0xbe0 [ 374.003027][T13228] ? __fget_files+0x1fc/0x3a0 [ 374.007701][T13228] ? __pfx___mutex_lock+0x10/0x10 [ 374.012723][T13228] ? __pfx_vfs_read+0x10/0x10 [ 374.017403][T13228] ? __fget_files+0x206/0x3a0 [ 374.022087][T13228] ksys_read+0x12b/0x250 [ 374.026328][T13228] ? __pfx_ksys_read+0x10/0x10 [ 374.031080][T13228] do_syscall_64+0xcd/0x250 [ 374.035586][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.041488][T13228] RIP: 0033:0x7fe5b7d7e8ec [ 374.045888][T13228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 374.065487][T13228] RSP: 002b:00007fe5b8af4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.073899][T13228] RAX: ffffffffffffffda RBX: 00007fe5b7f46080 RCX: 00007fe5b7d7e8ec [ 374.081871][T13228] RDX: 000000000000000f RSI: 00007fe5b8af40b0 RDI: 0000000000000004 [ 374.089858][T13228] RBP: 00007fe5b8af40a0 R08: 0000000000000000 R09: 0000000000000000 [ 374.097814][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.105769][T13228] R13: 0000000000000000 R14: 00007fe5b7f46080 R15: 00007ffea9657538 [ 374.113749][T13228] [ 374.116801][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.134836][ T5834] Bluetooth: hci4: command tx timeout [ 374.284615][ T5867] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 374.558061][ T5153] net_ratelimit: 2 callbacks suppressed [ 374.558076][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.673464][ T5867] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 374.682045][ T5867] usb 3-1: config 0 has no interface number 0 [ 374.688180][ T5867] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 374.701763][ T5867] usb 3-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 374.715232][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.725226][ T5867] usb 3-1: Product: syz [ 374.729406][ T5867] usb 3-1: Manufacturer: syz [ 374.739562][ T5867] usb 3-1: SerialNumber: syz [ 374.858164][ T5867] usb 3-1: config 0 descriptor?? [ 374.863997][T13229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 375.092395][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.109422][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.136783][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.144695][ T5867] usb 3-1: MIDIStreaming interface descriptor not found [ 375.233352][ T5867] usb 3-1: USB disconnect, device number 38 [ 375.301360][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.310510][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.327824][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.335235][T12809] bridge_slave_1: entered allmulticast mode [ 375.342154][T12809] bridge_slave_1: entered promiscuous mode [ 375.918937][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.936696][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.948557][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.957355][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.965789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.980341][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.989419][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.001900][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.206825][ T5834] Bluetooth: hci4: command tx timeout [ 376.667942][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.469233][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.478974][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 377.494039][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.032801][T13327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.050840][T13327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.132994][T13327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.140438][T13327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.328207][T12809] team0: Port device team_slave_0 added [ 378.329782][T12809] team0: Port device team_slave_1 added [ 378.592462][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.598797][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.305549][T13414] xt_nat: multiple ranges no longer supported [ 379.351500][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.455717][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.638878][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.728976][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.775921][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.782016][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 379.832397][ T5153] net_ratelimit: 15 callbacks suppressed [ 379.832414][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.896590][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.976592][ T12] IPVS: stop unused estimator thread 0... [ 380.033233][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 380.039952][ T8] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 380.053136][ T8] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.082547][ T8] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 380.122144][T12809] hsr_slave_0: entered promiscuous mode [ 380.128482][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 380.139400][ T8] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 380.139568][T12809] hsr_slave_1: entered promiscuous mode [ 380.155426][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.167858][ T8] usb 7-1: config 0 descriptor?? [ 380.176086][T12809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.188451][T12809] Cannot create hsr debugfs directory [ 380.472407][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.608958][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 380.652077][ T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 380.667693][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.753382][ T8] usb 7-1: USB disconnect, device number 4 [ 380.887757][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.019831][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.060114][T12809] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.071060][T12809] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 381.116102][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.124787][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.135782][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.146314][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.155872][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.172049][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.199702][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.412187][T12809] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.489358][T12809] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.879685][ T29] audit: type=1400 audit(1733687561.593:1021): avc: denied { create } for pid=13566 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 382.363999][T13567] overlay: ./file0 is not a directory [ 382.422707][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.440301][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.587404][ T29] audit: type=1400 audit(1733687562.303:1022): avc: denied { setopt } for pid=13578 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 382.619199][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.686457][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.712962][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.737203][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.750830][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.768133][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.786773][T13579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.385148][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.399083][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.414885][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 384.430951][ T12] bond0 (unregistering): Released all slaves [ 384.432177][ T5153] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 384.448508][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.455732][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.516399][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.523622][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.615902][ T5153] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 384.643570][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.651821][ T5153] usb 4-1: Product: syz [ 384.658588][ T5153] usb 4-1: Manufacturer: syz [ 384.665528][ T5153] usb 4-1: SerialNumber: syz [ 384.691126][ T5153] usb 4-1: config 0 descriptor?? [ 384.725672][ T5153] ch341 4-1:0.0: ch341-uart converter detected [ 384.936049][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.990029][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.065111][ T5153] usb 4-1: failed to receive control message: -32 [ 385.087173][ T5153] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 385.152184][ T29] audit: type=1400 audit(1733687564.843:1023): avc: denied { setopt } for pid=13635 comm="syz.6.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 385.336081][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.464151][ T12] hsr_slave_0: left promiscuous mode [ 385.512547][ T6913] net_ratelimit: 2 callbacks suppressed [ 385.512564][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.526215][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.553025][ T12] hsr_slave_1: left promiscuous mode [ 385.568554][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.573836][T13685] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 385.576119][ T29] audit: type=1400 audit(1733687565.283:1024): avc: denied { getopt } for pid=13684 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 385.584267][T13685] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 385.584295][T13685] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 385.624792][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.637893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.753327][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.760956][ T29] audit: type=1400 audit(1733687565.343:1025): avc: denied { create } for pid=13684 comm="syz.4.1089" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.824927][ T12] veth1_macvtap: left promiscuous mode [ 385.830513][ T12] veth0_macvtap: left promiscuous mode [ 385.836500][ T12] veth1_vlan: left promiscuous mode [ 385.841821][ T12] veth0_vlan: left promiscuous mode [ 386.588375][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.852271][ T29] audit: type=1400 audit(1733687566.563:1026): avc: denied { append } for pid=13699 comm="syz.4.1092" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 386.877005][ T6241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.885588][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.893739][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.901839][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.915778][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.962076][T13704] xt_nat: multiple ranges no longer supported [ 387.478836][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.614520][ T970] usb 4-1: USB disconnect, device number 59 [ 387.624549][ T970] ch341 4-1:0.0: device disconnected [ 387.674035][ T29] audit: type=1400 audit(1733687567.393:1027): avc: denied { setopt } for pid=13699 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 387.992159][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.156681][ T29] audit: type=1400 audit(1733687567.873:1028): avc: denied { execute } for pid=13727 comm="syz.3.1096" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 388.554643][ T5870] IPVS: starting estimator thread 0... [ 388.667700][T13734] IPVS: using max 23 ests per chain, 55200 per kthread [ 389.768034][T13748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.282153][ T5870] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 390.329262][T13766] xt_nat: multiple ranges no longer supported [ 390.441949][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 390.485231][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.712808][ T5153] net_ratelimit: 2 callbacks suppressed [ 390.712826][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.763817][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.793365][ T5870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.808815][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.818093][ T5870] usb 5-1: Product: syz [ 390.825652][ T5870] usb 5-1: Manufacturer: syz [ 390.830438][ T5870] usb 5-1: SerialNumber: syz [ 391.268047][ T5870] usb 5-1: cannot find UAC_HEADER [ 391.359097][ T5870] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 391.388102][ T5870] usb 5-1: USB disconnect, device number 44 [ 391.573423][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.592266][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.752139][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.691025][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.699895][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.711418][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.796505][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.273080][ T6227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.282033][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.292831][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.392319][ T5870] net_ratelimit: 3 callbacks suppressed [ 396.392338][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.432219][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.675396][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.392243][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.403475][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.413187][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.472200][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.035264][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.045331][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.055308][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.152141][ T5867] net_ratelimit: 3 callbacks suppressed [ 402.152159][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.192194][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.416504][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.427154][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.436681][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.455810][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.465590][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 403.473147][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 403.752128][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.235600][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.272285][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.512083][ T5834] Bluetooth: hci5: command tx timeout [ 406.315808][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.802091][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.914726][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.924495][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.938291][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.946158][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.956618][ T5824] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 406.964428][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.354637][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.592071][ T5834] Bluetooth: hci5: command tx timeout [ 408.002229][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.392111][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.412639][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 408.421924][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 408.431341][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 408.441654][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 408.450644][ T5824] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 408.459573][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 409.032368][ T5834] Bluetooth: hci6: command tx timeout [ 409.432184][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.457766][ T5824] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 409.468325][ T5824] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 409.476613][ T5824] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 409.486163][ T5824] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 409.495445][ T5824] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 409.502896][ T5824] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 409.672833][ T5834] Bluetooth: hci5: command tx timeout [ 409.832282][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.475800][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.552197][ T5834] Bluetooth: hci7: command tx timeout [ 411.111973][ T5834] Bluetooth: hci6: command tx timeout [ 411.512117][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.592161][ T5834] Bluetooth: hci8: command tx timeout [ 411.751991][ T5834] Bluetooth: hci5: command tx timeout [ 412.554347][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.632058][ T5834] Bluetooth: hci7: command tx timeout [ 412.885399][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.192078][ T5834] Bluetooth: hci6: command tx timeout [ 413.592226][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.672917][ T5834] Bluetooth: hci8: command tx timeout [ 414.632122][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.712073][ T5834] Bluetooth: hci7: command tx timeout [ 415.282094][ T5834] Bluetooth: hci6: command tx timeout [ 415.674463][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.752078][ T5834] Bluetooth: hci8: command tx timeout [ 415.916467][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.712249][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.792071][ T5834] Bluetooth: hci7: command tx timeout [ 417.592122][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.752131][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.832119][ T5834] Bluetooth: hci8: command tx timeout [ 418.792091][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.955710][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.835421][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.872130][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.912072][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.002259][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.953350][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.992189][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.032137][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.040283][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.072330][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.937625][ T5824] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 426.947543][ T5824] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 426.956155][ T5824] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 426.965580][ T5824] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 426.974455][ T5824] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 426.986414][ T5824] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 427.112144][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.202241][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.072280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.152207][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.032076][ T5834] Bluetooth: hci9: command tx timeout [ 429.192099][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.232283][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.112167][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.120467][ T5834] Bluetooth: hci9: command tx timeout [ 431.272509][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.320593][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.202100][ T5834] Bluetooth: hci9: command tx timeout [ 433.352073][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.162942][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.392130][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.272036][ T5834] Bluetooth: hci9: command tx timeout [ 435.432150][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.472170][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.800627][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.192207][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.512101][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.552096][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.592152][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.993862][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.000175][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.232165][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.632152][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.672948][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.712165][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.272110][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.752132][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.795306][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.832126][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.322886][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.392544][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.872124][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.912063][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.952254][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.352145][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.992090][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.032157][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.072128][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.398870][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.112345][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.153174][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.192184][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.448559][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.992311][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.232426][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.285979][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.312081][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.472160][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.356163][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.392209][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.432148][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.512292][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.472234][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.512229][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.014577][ T5824] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 464.025902][ T5824] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 464.034637][ T5824] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 464.047679][ T5824] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 464.055691][ T5824] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 464.066697][ T5824] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 464.552158][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.562116][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.592832][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.606587][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.152048][ T5834] Bluetooth: hci10: command tx timeout [ 466.632091][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.011197][ T5824] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 467.025324][ T5824] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 467.035134][ T5824] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 467.045414][ T5824] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 467.058283][ T5824] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 467.065881][ T5824] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 467.592056][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.672188][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.232100][ T5834] Bluetooth: hci10: command tx timeout [ 468.510104][ T5824] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 468.520701][ T5824] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 468.531365][ T5824] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 468.548314][ T5824] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 468.559284][ T5824] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 468.566756][ T5824] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 468.712147][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.112084][ T5834] Bluetooth: hci11: command tx timeout [ 469.547819][ T5824] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 469.560164][ T5824] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 469.569345][ T5824] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 469.578783][ T5824] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 469.586452][ T5824] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 469.593995][ T5824] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 469.752087][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.312129][ T5824] Bluetooth: hci10: command tx timeout [ 470.632151][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.638152][ T5824] Bluetooth: hci12: command tx timeout [ 470.792073][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.192454][ T5824] Bluetooth: hci11: command tx timeout [ 471.672128][ T5824] Bluetooth: hci13: command tx timeout [ 471.832265][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.392040][ T5824] Bluetooth: hci10: command tx timeout [ 472.712072][ T5824] Bluetooth: hci12: command tx timeout [ 472.872463][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.272086][ T5824] Bluetooth: hci11: command tx timeout [ 473.672102][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.752027][ T5824] Bluetooth: hci13: command tx timeout [ 473.912236][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.792036][ T5824] Bluetooth: hci12: command tx timeout [ 474.952054][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.198680][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.352012][ T5824] Bluetooth: hci11: command tx timeout [ 475.833227][ T5824] Bluetooth: hci13: command tx timeout [ 475.995322][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.714652][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.872103][ T5824] Bluetooth: hci12: command tx timeout [ 477.032169][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.922018][ T5824] Bluetooth: hci13: command tx timeout [ 478.072154][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.116135][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.752158][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.155629][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.192073][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.232237][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.792324][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.287041][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.312241][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.792424][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.356214][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.832171][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.395221][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.196530][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 487.206737][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 487.216436][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 487.225535][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 487.233402][ T5834] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 487.242432][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 487.432092][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.472103][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.882216][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.272058][ T5824] Bluetooth: hci14: command tx timeout [ 489.512045][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.552538][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.352171][ T5824] Bluetooth: hci14: command tx timeout [ 491.592191][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.918814][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.632164][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.432088][ T5824] Bluetooth: hci14: command tx timeout [ 493.672114][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.392254][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.712119][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.952103][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.522030][ T5824] Bluetooth: hci14: command tx timeout [ 495.762208][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.792174][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.832151][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.002163][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.014142][ T6255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.023249][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.031749][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.872080][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.912244][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.952135][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.042290][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.433876][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.440191][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.992099][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.032162][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.992223][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.072109][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.082197][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.112420][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.152094][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.112136][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.192153][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.232114][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.275965][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.155811][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.313310][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.362117][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.392063][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.192101][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.435335][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.602196][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.472152][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.512157][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.232060][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.555343][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.592099][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.645480][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.872260][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 519.275477][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.672097][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.680648][ T6237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.689607][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.699719][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.712058][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.752086][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.312602][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.792163][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.202152][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.211784][ T6241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.220382][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.229025][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.835630][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.233685][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 524.242876][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 524.256705][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 524.270274][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 524.280911][ T5834] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 524.288650][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 524.872088][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.362078][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.321984][ T5824] Bluetooth: hci15: command tx timeout [ 526.953045][ T5870] net_ratelimit: 1 callbacks suppressed [ 526.953064][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.227621][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 527.240148][ T5834] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 527.248411][ T5834] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 527.260487][ T5834] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 527.268537][ T5834] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 527.278549][ T5834] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 527.992638][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.392164][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.402015][T13913] Bluetooth: hci15: command tx timeout [ 528.739174][ T5834] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 528.748483][ T5834] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 528.758389][ T5834] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 528.767297][ T5834] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 528.775206][ T5834] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 528.782967][ T5834] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 529.032067][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.115707][T13913] Bluetooth: hci5: command 0x0406 tx timeout [ 529.115773][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 529.352140][ T5824] Bluetooth: hci16: command tx timeout [ 529.758547][T12810] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 529.770878][T12810] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 529.782860][T12810] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 529.790660][T12810] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 529.800331][T12810] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 529.807799][T12810] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 530.072074][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.472001][ T5824] Bluetooth: hci15: command tx timeout [ 530.872064][ T5824] Bluetooth: hci17: command tx timeout [ 531.112172][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.432206][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.432238][ T5824] Bluetooth: hci16: command tx timeout [ 531.833355][ T5824] Bluetooth: hci18: command tx timeout [ 532.153111][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.552055][ T5834] Bluetooth: hci15: command tx timeout [ 532.792059][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.962004][ T5834] Bluetooth: hci17: command tx timeout [ 533.192073][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.512094][ T5834] Bluetooth: hci16: command tx timeout [ 533.911999][ T5834] Bluetooth: hci18: command tx timeout [ 534.232166][ T5834] Bluetooth: hci8: command 0x0406 tx timeout [ 534.238258][T13913] Bluetooth: hci7: command 0x0406 tx timeout [ 534.247907][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.477824][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.031935][T12810] Bluetooth: hci17: command tx timeout [ 535.272498][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.592264][T12810] Bluetooth: hci16: command tx timeout [ 535.996280][T12810] Bluetooth: hci18: command tx timeout [ 536.312323][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.111949][T12810] Bluetooth: hci17: command tx timeout [ 537.272205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.352131][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.512062][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.072063][T12810] Bluetooth: hci18: command tx timeout [ 538.392176][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.432119][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.472101][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.552180][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.512171][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.402583][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.552050][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.592181][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.600337][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.632095][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.592052][ T30] INFO: task kworker/u8:6:1091 blocked for more than 143 seconds. [ 545.599935][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 545.607716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.616942][ T30] task:kworker/u8:6 state:D stack:23488 pid:1091 tgid:1091 ppid:2 flags:0x00004000 [ 545.627220][ T30] Workqueue: events_unbound linkwatch_event [ 545.633363][ T30] Call Trace: [ 545.636649][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 545.639581][ T30] __schedule+0xe58/0x5ad0 [ 545.651950][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 545.657184][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 545.662467][ T29] audit: type=1400 audit(1733687725.363:1029): avc: denied { write } for pid=5804 comm="syz-executor" path="pipe:[4846]" dev="pipefs" ino=4846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 545.690602][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.690589][ T30] ? __pfx___schedule+0x10/0x10 [ 545.690630][ T30] ? schedule+0x298/0x350 [ 545.708018][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.757453][ T30] ? __mutex_trylock_common+0x78/0x250 [ 545.774805][ T30] ? lock_acquire+0x2f/0xb0 [ 545.779351][ T30] ? schedule+0x1fd/0x350 [ 545.783797][ T30] schedule+0xe7/0x350 [ 545.787877][ T30] schedule_preempt_disabled+0x13/0x30 [ 545.793653][ T30] __mutex_lock+0x62b/0xa60 [ 545.798183][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 545.803442][ T30] ? linkwatch_event+0x51/0xc0 [ 545.808223][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 545.813343][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 545.818989][ T30] ? linkwatch_event+0x51/0xc0 [ 545.823834][ T30] ? rtnl_lock+0x9/0x20 [ 545.828177][ T30] linkwatch_event+0x51/0xc0 [ 545.833156][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 545.838463][ T30] ? rcu_is_watching+0x12/0xc0 [ 545.843403][ T30] process_one_work+0x9c5/0x1ba0 [ 545.848396][ T30] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 545.855152][ T30] ? __pfx_process_one_work+0x10/0x10 [ 545.860555][ T30] ? rcu_is_watching+0x12/0xc0 [ 545.865423][ T30] ? assign_work+0x1a0/0x250 [ 545.870032][ T30] worker_thread+0x6c8/0xf00 [ 545.874766][ T30] ? __pfx_worker_thread+0x10/0x10 [ 545.879897][ T30] kthread+0x2c1/0x3a0 [ 545.884047][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.889273][ T30] ? __pfx_kthread+0x10/0x10 [ 545.893954][ T30] ret_from_fork+0x45/0x80 [ 545.898376][ T30] ? __pfx_kthread+0x10/0x10 [ 545.903240][ T30] ret_from_fork_asm+0x1a/0x30 [ 545.908053][ T30] [ 545.911131][ T30] INFO: task dhcpcd:5486 blocked for more than 143 seconds. [ 545.919857][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 545.928533][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.939838][ T30] task:dhcpcd state:D stack:22672 pid:5486 tgid:5486 ppid:5485 flags:0x00004002 [ 545.950897][ T30] Call Trace: [ 545.956942][ T30] [ 545.959881][ T30] __schedule+0xe58/0x5ad0 [ 545.966158][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 545.971385][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 545.976927][ T30] ? __pfx___schedule+0x10/0x10 [ 545.982589][ T30] ? schedule+0x298/0x350 [ 545.986939][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.992244][ T30] ? __mutex_trylock_common+0x78/0x250 [ 545.997719][ T30] ? lock_acquire+0x2f/0xb0 [ 546.002297][ T30] ? schedule+0x1fd/0x350 [ 546.006644][ T30] schedule+0xe7/0x350 [ 546.010804][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.016586][ T30] __mutex_lock+0x62b/0xa60 [ 546.021108][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 546.027084][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 546.033453][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 546.038333][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.043435][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.048484][ T30] ? bpf_lsm_capable+0x9/0x10 [ 546.053273][ T30] ? security_capable+0x7e/0x260 [ 546.058237][ T30] ? devinet_ioctl+0x26e/0x1f50 [ 546.063167][ T30] devinet_ioctl+0x26e/0x1f50 [ 546.067863][ T30] ? __might_fault+0xe3/0x190 [ 546.072707][ T30] ? __might_fault+0xe3/0x190 [ 546.077450][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 546.083543][ T30] ? _copy_from_user+0x59/0xd0 [ 546.088326][ T30] inet_ioctl+0x3aa/0x3f0 [ 546.092797][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 546.097670][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.102798][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 546.108712][ T30] sock_do_ioctl+0x116/0x280 [ 546.113448][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 546.118587][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 546.125428][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 546.132076][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 546.138959][ T30] sock_ioctl+0x228/0x6c0 [ 546.143383][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 546.148250][ T30] ? selinux_file_ioctl+0x180/0x270 [ 546.153551][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 546.158687][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 546.163664][ T30] __x64_sys_ioctl+0x190/0x200 [ 546.168440][ T30] do_syscall_64+0xcd/0x250 [ 546.173034][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.178966][ T30] RIP: 0033:0x7f9362220d49 [ 546.183451][ T30] RSP: 002b:00007ffe9bbc7888 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.192026][ T30] RAX: ffffffffffffffda RBX: 00007f93621526c0 RCX: 00007f9362220d49 [ 546.200000][ T30] RDX: 00007ffe9bbd7a78 RSI: 0000000000008914 RDI: 0000000000000018 [ 546.208020][ T30] RBP: 00007ffe9bbe7c38 R08: 00007ffe9bbd7a38 R09: 00007ffe9bbd79e8 [ 546.216064][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.224143][ T30] R13: 00007ffe9bbd7a78 R14: 0000000000000028 R15: 0000000000008914 [ 546.232506][ T30] [ 546.235576][ T30] INFO: task kworker/u8:18:6252 blocked for more than 144 seconds. [ 546.243608][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 546.251248][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.260097][ T30] task:kworker/u8:18 state:D stack:24192 pid:6252 tgid:6252 ppid:2 flags:0x00004000 [ 546.270560][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 546.276814][ T30] Call Trace: [ 546.280191][ T30] [ 546.283210][ T30] __schedule+0xe58/0x5ad0 [ 546.287647][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 546.292931][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 546.298140][ T30] ? __pfx___schedule+0x10/0x10 [ 546.303042][ T30] ? schedule+0x298/0x350 [ 546.307379][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.312548][ T30] ? __mutex_trylock_common+0x78/0x250 [ 546.318014][ T30] ? lock_acquire+0x2f/0xb0 [ 546.322576][ T30] ? schedule+0x1fd/0x350 [ 546.326911][ T30] schedule+0xe7/0x350 [ 546.330966][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.336514][ T30] __mutex_lock+0x62b/0xa60 [ 546.341041][ T30] ? addrconf_dad_work+0xcf/0x14d0 [ 546.346453][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.351523][ T30] ? debug_object_deactivate+0x1ef/0x370 [ 546.357293][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.362409][ T30] ? lock_acquire+0x2f/0xb0 [ 546.366965][ T30] ? addrconf_dad_work+0xcf/0x14d0 [ 546.372150][ T30] ? rtnl_lock+0x9/0x20 [ 546.376322][ T30] addrconf_dad_work+0xcf/0x14d0 [ 546.381273][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 546.386991][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 546.392618][ T30] ? process_one_work+0x921/0x1ba0 [ 546.397739][ T30] ? lock_acquire+0x2f/0xb0 [ 546.402519][ T30] ? process_one_work+0x921/0x1ba0 [ 546.407646][ T30] process_one_work+0x9c5/0x1ba0 [ 546.412810][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 546.418465][ T30] ? __pfx_process_one_work+0x10/0x10 [ 546.423907][ T30] ? rcu_is_watching+0x12/0xc0 [ 546.428710][ T30] ? assign_work+0x1a0/0x250 [ 546.433507][ T30] worker_thread+0x6c8/0xf00 [ 546.438132][ T30] ? __pfx_worker_thread+0x10/0x10 [ 546.443352][ T30] kthread+0x2c1/0x3a0 [ 546.447512][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.453010][ T30] ? __pfx_kthread+0x10/0x10 [ 546.457632][ T30] ret_from_fork+0x45/0x80 [ 546.462142][ T30] ? __pfx_kthread+0x10/0x10 [ 546.466759][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.471555][ T30] [ 546.474818][ T30] INFO: task syz-executor:12809 blocked for more than 144 seconds. [ 546.483275][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 546.490899][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.499667][ T30] task:syz-executor state:D stack:23520 pid:12809 tgid:12809 ppid:1 flags:0x00000004 [ 546.509938][ T30] Call Trace: [ 546.513354][ T30] [ 546.516293][ T30] __schedule+0xe58/0x5ad0 [ 546.520732][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 546.526167][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 546.531382][ T30] ? __pfx___schedule+0x10/0x10 [ 546.536274][ T30] ? schedule+0x298/0x350 [ 546.540628][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.545905][ T30] ? __mutex_trylock_common+0x78/0x250 [ 546.551377][ T30] ? lock_acquire+0x2f/0xb0 [ 546.557294][ T30] ? schedule+0x1fd/0x350 [ 546.561655][ T30] schedule+0xe7/0x350 [ 546.566086][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.571545][ T30] __mutex_lock+0x62b/0xa60 [ 546.576104][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 546.582609][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 546.587732][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.592858][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 546.598222][ T30] ? rtnetlink_rcv_msg+0x372/0xea0 [ 546.603390][ T30] rtnetlink_rcv_msg+0x372/0xea0 [ 546.608456][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.613998][ T30] netlink_rcv_skb+0x16b/0x440 [ 546.618786][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.624344][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.629666][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 546.635076][ T30] netlink_unicast+0x53c/0x7f0 [ 546.639860][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 546.645301][ T30] netlink_sendmsg+0x8b8/0xd70 [ 546.646519][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.650079][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.667521][ T30] __sys_sendto+0x488/0x4f0 [ 546.673009][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 546.678073][ T30] ? __fput+0x686/0xb60 [ 546.684324][ T30] __x64_sys_sendto+0xe0/0x1c0 [ 546.689102][ T30] ? do_syscall_64+0x91/0x250 [ 546.695256][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.700470][ T30] do_syscall_64+0xcd/0x250 [ 546.707559][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.715447][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.723759][ T30] RIP: 0033:0x7f3914381d6c [ 546.728181][ T30] RSP: 002b:00007fffa799e220 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 546.736677][ T30] RAX: ffffffffffffffda RBX: 00007f3915074620 RCX: 00007f3914381d6c [ 546.744697][ T30] RDX: 0000000000000040 RSI: 00007f3915074670 RDI: 0000000000000003 [ 546.752751][ T30] RBP: 0000000000000000 R08: 00007fffa799e274 R09: 000000000000000c [ 546.760723][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 546.769795][ T30] R13: 0000000000000000 R14: 00007f3915074670 R15: 0000000000000000 [ 546.777954][ T30] [ 546.780989][ T30] INFO: task syz.3.1096:13728 blocked for more than 144 seconds. [ 546.788987][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 546.796902][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.805855][ T30] task:syz.3.1096 state:D stack:27232 pid:13728 tgid:13727 ppid:5820 flags:0x00000004 [ 546.816146][ T30] Call Trace: [ 546.819537][ T30] [ 546.822779][ T30] __schedule+0xe58/0x5ad0 [ 546.827209][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 546.832491][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 546.837721][ T30] ? __pfx___schedule+0x10/0x10 [ 546.842685][ T30] ? schedule+0x298/0x350 [ 546.847033][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.852234][ T30] ? __mutex_trylock_common+0x78/0x250 [ 546.857740][ T30] ? lock_acquire+0x2f/0xb0 [ 546.862514][ T30] ? schedule+0x1fd/0x350 [ 546.866861][ T30] schedule+0xe7/0x350 [ 546.870928][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.876837][ T30] __mutex_lock+0x62b/0xa60 [ 546.881372][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 546.886432][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.891489][ T30] ? __nla_parse+0x40/0x60 [ 546.896148][ T30] ? nl80211_pre_doit+0xb4/0xb10 [ 546.901110][ T30] nl80211_pre_doit+0xb4/0xb10 [ 546.906010][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 546.911503][ T30] genl_family_rcv_msg_doit+0x1be/0x2f0 [ 546.917143][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 546.923322][ T30] ? bpf_lsm_capable+0x9/0x10 [ 546.928006][ T30] ? security_capable+0x7e/0x260 [ 546.932990][ T30] ? ns_capable+0xd7/0x110 [ 546.937417][ T30] genl_rcv_msg+0x565/0x800 [ 546.942010][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.947043][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 546.952586][ T30] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 546.958070][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 546.963672][ T30] netlink_rcv_skb+0x16b/0x440 [ 546.968463][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.973622][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.978928][ T30] ? down_read+0xc9/0x330 [ 546.983400][ T30] ? __pfx_down_read+0x10/0x10 [ 546.988178][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 546.993594][ T30] genl_rcv+0x28/0x40 [ 546.997586][ T30] netlink_unicast+0x53c/0x7f0 [ 547.002688][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 547.008010][ T30] netlink_sendmsg+0x8b8/0xd70 [ 547.012837][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.018143][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 547.023023][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 547.028508][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.034093][ T30] ___sys_sendmsg+0x135/0x1e0 [ 547.038807][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.044138][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.049273][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 547.054572][ T30] ? __fget_files+0x206/0x3a0 [ 547.059279][ T30] __sys_sendmsg+0x16e/0x220 [ 547.064200][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.069336][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 547.074703][ T30] do_syscall_64+0xcd/0x250 [ 547.079233][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.085367][ T30] RIP: 0033:0x7fa8b5f7fed9 [ 547.089799][ T30] RSP: 002b:00007fa8b6db5058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.098282][ T30] RAX: ffffffffffffffda RBX: 00007fa8b6145fa0 RCX: 00007fa8b5f7fed9 [ 547.106318][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 547.114564][ T30] RBP: 00007fa8b5ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 547.122607][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.130587][ T30] R13: 0000000000000000 R14: 00007fa8b6145fa0 R15: 00007ffc1f53cdd8 [ 547.138630][ T30] [ 547.141659][ T30] INFO: task syz.6.1105:13793 blocked for more than 144 seconds. [ 547.149682][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 547.157390][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.166114][ T30] task:syz.6.1105 state:D stack:27184 pid:13793 tgid:13792 ppid:11910 flags:0x00000004 [ 547.176537][ T30] Call Trace: [ 547.179818][ T30] [ 547.182802][ T30] __schedule+0xe58/0x5ad0 [ 547.187240][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.192573][ T30] ? __pfx___schedule+0x10/0x10 [ 547.197445][ T30] ? schedule+0x298/0x350 [ 547.201788][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.206891][ T30] ? __mutex_trylock_common+0x78/0x250 [ 547.212420][ T30] ? lock_acquire+0x2f/0xb0 [ 547.216936][ T30] ? schedule+0x1fd/0x350 [ 547.221281][ T30] schedule+0xe7/0x350 [ 547.225603][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.231097][ T30] __mutex_lock+0x62b/0xa60 [ 547.235700][ T30] ? rtnl_newlink+0x5e4/0x1ce0 [ 547.240526][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.245659][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 547.251397][ T30] ? rtnl_link_ops_get+0x17b/0x2c0 [ 547.256561][ T30] ? cap_capable+0x1cf/0x240 [ 547.261165][ T30] ? ns_capable+0xd7/0x110 [ 547.265650][ T30] ? rtnl_newlink+0x5e4/0x1ce0 [ 547.270417][ T30] rtnl_newlink+0x5e4/0x1ce0 [ 547.275122][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 547.280158][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.285454][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 547.291369][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 547.297671][ T30] ? find_held_lock+0x2d/0x110 [ 547.302535][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 547.307650][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.312761][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 547.317976][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 547.323067][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 547.328020][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.333759][ T30] netlink_rcv_skb+0x16b/0x440 [ 547.338547][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.344274][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.349599][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 547.355255][ T30] netlink_unicast+0x53c/0x7f0 [ 547.360044][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 547.366184][ T30] netlink_sendmsg+0x8b8/0xd70 [ 547.370973][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.376453][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 547.381251][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 547.386765][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.392182][ T30] ___sys_sendmsg+0x135/0x1e0 [ 547.396866][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.402130][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.407159][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 547.412441][ T30] ? __fget_files+0x206/0x3a0 [ 547.417139][ T30] __sys_sendmsg+0x16e/0x220 [ 547.421724][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 547.426927][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 547.431995][ T30] do_syscall_64+0xcd/0x250 [ 547.436513][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.442676][ T30] RIP: 0033:0x7fe5b7d7fed9 [ 547.447100][ T30] RSP: 002b:00007fe5b8b15058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.455549][ T30] RAX: ffffffffffffffda RBX: 00007fe5b7f45fa0 RCX: 00007fe5b7d7fed9 [ 547.463584][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000f [ 547.471559][ T30] RBP: 00007fe5b7df3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 547.479670][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.487736][ T30] R13: 0000000000000000 R14: 00007fe5b7f45fa0 R15: 00007ffea9657538 [ 547.495771][ T30] [ 547.498809][ T30] INFO: task syz.4.1110:13814 blocked for more than 145 seconds. [ 547.506750][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 547.519589][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.529165][ T30] task:syz.4.1110 state:D stack:25568 pid:13814 tgid:13813 ppid:5815 flags:0x00000004 [ 547.541897][ T30] Call Trace: [ 547.545184][ T30] [ 547.548111][ T30] __schedule+0xe58/0x5ad0 [ 547.555790][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.560987][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.566272][ T30] ? __pfx___schedule+0x10/0x10 [ 547.571132][ T30] ? schedule+0x298/0x350 [ 547.578864][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.585931][ T30] ? __mutex_trylock_common+0x78/0x250 [ 547.591408][ T30] ? lock_acquire+0x2f/0xb0 [ 547.599540][ T30] ? schedule+0x1fd/0x350 [ 547.604566][ T30] schedule+0xe7/0x350 [ 547.608653][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.617654][ T30] __mutex_lock+0x62b/0xa60 [ 547.622270][ T30] ? locks_remove_posix+0x284/0x490 [ 547.627668][ T30] ? tun_chr_close+0x38/0x230 [ 547.636259][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.641312][ T30] ? locks_remove_file+0x393/0x5a0 [ 547.646497][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 547.652138][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 547.657271][ T30] ? tun_chr_close+0x38/0x230 [ 547.662206][ T30] ? rtnl_lock+0x9/0x20 [ 547.666382][ T30] tun_chr_close+0x38/0x230 [ 547.670885][ T30] __fput+0x3f8/0xb60 [ 547.674975][ T30] __fput_sync+0xa1/0xc0 [ 547.679243][ T30] __x64_sys_close+0x86/0x100 [ 547.684005][ T30] do_syscall_64+0xcd/0x250 [ 547.688531][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.694587][ T30] RIP: 0033:0x7f8ad137fed9 [ 547.699014][ T30] RSP: 002b:00007f8ad21cc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 547.707532][ T30] RAX: ffffffffffffffda RBX: 00007f8ad1545fa0 RCX: 00007f8ad137fed9 [ 547.718945][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 547.726980][ T30] RBP: 00007f8ad13f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 547.735089][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.743143][ T30] R13: 0000000000000000 R14: 00007f8ad1545fa0 R15: 00007ffc81bfeca8 [ 547.751138][ T30] [ 547.754397][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.762737][ T30] INFO: task syz.2.1112:13823 blocked for more than 145 seconds. [ 547.770557][ T30] Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 547.778436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.787204][ T30] task:syz.2.1112 state:D stack:26336 pid:13823 tgid:13822 ppid:5818 flags:0x00000004 [ 547.797472][ T30] Call Trace: [ 547.800751][ T30] [ 547.803767][ T30] __schedule+0xe58/0x5ad0 [ 547.808202][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.813490][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.818713][ T30] ? __pfx___schedule+0x10/0x10 [ 547.823689][ T30] ? schedule+0x298/0x350 [ 547.828027][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.833321][ T30] ? __mutex_trylock_common+0x78/0x250 [ 547.838804][ T30] ? lock_acquire+0x2f/0xb0 [ 547.843418][ T30] ? schedule+0x1fd/0x350 [ 547.847772][ T30] schedule+0xe7/0x350 [ 547.851894][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.857360][ T30] __mutex_lock+0x62b/0xa60 [ 547.861979][ T30] ? rtnl_newlink+0x5e4/0x1ce0 [ 547.866761][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.871795][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 547.877604][ T30] ? rtnl_link_ops_get+0x17b/0x2c0 [ 547.883000][ T30] ? cap_capable+0x1cf/0x240 [ 547.887616][ T30] ? ns_capable+0xd7/0x110 [ 547.892088][ T30] ? rtnl_newlink+0x5e4/0x1ce0 [ 547.896860][ T30] rtnl_newlink+0x5e4/0x1ce0 [ 547.901494][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 547.906640][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 547.912125][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 547.918033][ T30] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 547.924389][ T30] ? find_held_lock+0x2d/0x110 [ 547.929182][ T30] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 547.934350][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.939382][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 547.944692][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 547.949732][ T30] rtnetlink_rcv_msg+0x95b/0xea0 [ 547.954750][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.960245][ T30] netlink_rcv_skb+0x16b/0x440 [ 547.965121][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.970592][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.975947][ T30] ? netlink_deliver_tap+0x1ae/0xd30 [ 547.981247][ T30] netlink_unicast+0x53c/0x7f0 [ 547.986133][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 547.991455][ T30] netlink_sendmsg+0x8b8/0xd70 [ 547.996507][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.001954][ T30] ____sys_sendmsg+0xaaf/0xc90 [ 548.006740][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 548.012533][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.017845][ T30] ? __lock_acquire+0xcc5/0x3c40 [ 548.023347][ T30] ___sys_sendmsg+0x135/0x1e0 [ 548.028064][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.033353][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 548.038846][ T30] __sys_sendmmsg+0x201/0x420 [ 548.043851][ T30] ? __pfx___sys_sendmmsg+0x10/0x10 [ 548.049073][ T30] ? __pfx_do_futex+0x10/0x10 [ 548.054534][ T30] ? __sys_socket+0xad/0x260 [ 548.059176][ T30] ? __pfx___x64_sys_futex+0x10/0x10 [ 548.064706][ T30] __x64_sys_sendmmsg+0x9c/0x100 [ 548.069656][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.075331][ T30] do_syscall_64+0xcd/0x250 [ 548.079857][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.086119][ T30] RIP: 0033:0x7ff7ff97fed9 [ 548.090549][ T30] RSP: 002b:00007ff8007c0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 548.099020][ T30] RAX: ffffffffffffffda RBX: 00007ff7ffb45fa0 RCX: 00007ff7ff97fed9 [ 548.107360][ T30] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000008 [ 548.115431][ T30] RBP: 00007ff7ff9f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 548.123556][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.131543][ T30] R13: 0000000000000000 R14: 00007ff7ffb45fa0 R15: 00007ffd1b31ee68 [ 548.139612][ T30] [ 548.142877][ T30] [ 548.142877][ T30] Showing all locks held in the system: [ 548.150595][ T30] 3 locks held by kworker/0:0/8: [ 548.155786][ T30] #0: ffff88801b079948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 548.168063][ T30] #1: ffffc900000d7d80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 548.178747][ T30] #2: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x84/0x1130 [ 548.188623][ T30] 4 locks held by kworker/u8:1/12: [ 548.193925][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 548.204890][ T30] #1: ffffc90000117d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 548.215153][ T30] #2: ffffffff8fec4610 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xb40 [ 548.224534][ T30] #3: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8c/0xae0 [ 548.234762][ T30] 1 lock held by khungtaskd/30: [ 548.239611][ T30] #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 548.249583][ T30] 3 locks held by kworker/u8:6/1091: [ 548.255112][ T30] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 548.266344][ T30] #1: ffffc9000454fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 548.276800][ T30] #2: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 548.285981][ T30] 1 lock held by dhcpcd/5486: [ 548.290667][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26e/0x1f50 [ 548.299916][ T30] 2 locks held by getty/5570: [ 548.304682][ T30] #0: ffff888036e0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 548.315800][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 548.326492][ T30] 3 locks held by kworker/u9:2/5824: [ 548.331783][ T30] #0: ffff88805ab35148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 548.344694][ T30] #1: ffffc90003947d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 548.358184][ T30] #2: ffff88806eb00d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x170/0x410 [ 548.370144][ T30] 3 locks held by kworker/u8:18/6252: [ 548.377514][ T30] #0: ffff8880312eb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 548.389133][ T30] #1: ffffc90003607d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 548.401460][ T30] #2: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xcf/0x14d0 [ 548.410972][ T30] 1 lock held by syz-executor/12809: [ 548.416281][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 548.425747][ T30] 2 locks held by syz.3.1096/13728: [ 548.430951][ T30] #0: ffffffff8ff79310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 548.439402][ T30] #1: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 548.450309][ T30] 2 locks held by syz.6.1105/13793: [ 548.457572][ T30] #0: ffffffff8f275a40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0 [ 548.468588][ T30] #1: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5e4/0x1ce0 [ 548.479759][ T30] 1 lock held by syz.4.1110/13814: [ 548.486539][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 548.496732][ T30] 2 locks held by syz.2.1112/13823: [ 548.502041][ T30] #0: ffffffff905f5f00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x10f/0x2c0 [ 548.511765][ T30] #1: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5e4/0x1ce0 [ 548.520881][ T30] 1 lock held by syz-executor/13826: [ 548.526220][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.535722][ T30] 1 lock held by syz-executor/13834: [ 548.540999][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.550648][ T30] 1 lock held by syz-executor/13843: [ 548.555982][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.565497][ T30] 1 lock held by syz-executor/13850: [ 548.570788][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.580319][ T30] 1 lock held by syz-executor/13857: [ 548.585660][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.595115][ T30] 1 lock held by syz-executor/13865: [ 548.600408][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.610329][ T30] 1 lock held by syz-executor/13873: [ 548.615654][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.625152][ T30] 1 lock held by syz-executor/13880: [ 548.630433][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.640214][ T30] 1 lock held by syz-executor/13887: [ 548.645620][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.657931][ T30] 1 lock held by syz-executor/13894: [ 548.664067][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.676205][ T30] 1 lock held by syz-executor/13905: [ 548.681497][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.691784][ T30] 1 lock held by syz-executor/13915: [ 548.697386][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.706924][ T30] 1 lock held by syz-executor/13923: [ 548.712279][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.721700][ T30] 1 lock held by syz-executor/13932: [ 548.727033][ T30] #0: ffffffff8feda348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 548.736543][ T30] [ 548.738866][ T30] ============================================= [ 548.738866][ T30] [ 548.747344][ T30] NMI backtrace for cpu 1 [ 548.751666][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 548.762153][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 548.772198][ T30] Call Trace: [ 548.775467][ T30] [ 548.778395][ T30] dump_stack_lvl+0x116/0x1f0 [ 548.783065][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 548.787992][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 548.793960][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 548.799947][ T30] watchdog+0xf14/0x1240 [ 548.804201][ T30] ? __pfx_watchdog+0x10/0x10 [ 548.808884][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.814085][ T30] ? __kthread_parkme+0x148/0x220 [ 548.819096][ T30] ? __pfx_watchdog+0x10/0x10 [ 548.823765][ T30] kthread+0x2c1/0x3a0 [ 548.827840][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.833044][ T30] ? __pfx_kthread+0x10/0x10 [ 548.837637][ T30] ret_from_fork+0x45/0x80 [ 548.842034][ T30] ? __pfx_kthread+0x10/0x10 [ 548.846623][ T30] ret_from_fork_asm+0x1a/0x30 [ 548.851407][ T30] [ 548.854729][ T30] Sending NMI from CPU 1 to CPUs 0: [ 548.859944][ C0] NMI backtrace for cpu 0 [ 548.859955][ C0] CPU: 0 UID: 0 PID: 6237 Comm: kworker/u8:13 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 548.859978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 548.859991][ C0] Workqueue: events_unbound toggle_allocation_gate [ 548.860016][ C0] RIP: 0010:trace_tlb_flush+0x4b/0x180 [ 548.860044][ C0] Code: 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 90 0f 5f 90 e8 29 0e b2 00 48 0f a3 1d a1 27 14 0f 0f 82 c9 00 00 00 5b 5d 41 5c 41 5d cc cc cc cc 41 89 fc 48 89 f3 48 c7 c5 0c d9 03 00 65 8b 05 f8 [ 548.860063][ C0] RSP: 0018:ffffc90003617910 EFLAGS: 00000002 [ 548.860077][ C0] RAX: 0000000000000001 RBX: ffffffff8e3556c0 RCX: ffffffff814ae7e7 [ 548.860090][ C0] RDX: 0000000000000000 RSI: ffffffff8bd1b4e0 RDI: ffffffff8da72be0 [ 548.860104][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20be1f2 [ 548.860116][ C0] R10: ffffffff905f0f97 R11: 0000000000000006 R12: ffff88801b070000 [ 548.860129][ C0] R13: 0000000000000001 R14: ffff88801b070900 R15: 0000000000000000 [ 548.860141][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 548.860160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.860174][ C0] CR2: 000055a522df2728 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 548.860187][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.860199][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.860211][ C0] Call Trace: [ 548.860216][ C0] [ 548.860223][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 548.860245][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 548.860263][ C0] ? nmi_handle+0x1ac/0x5d0 [ 548.860285][ C0] ? trace_tlb_flush+0x4b/0x180 [ 548.860310][ C0] ? default_do_nmi+0x6a/0x160 [ 548.860329][ C0] ? exc_nmi+0x170/0x1e0 [ 548.860347][ C0] ? end_repeat_nmi+0xf/0x53 [ 548.860377][ C0] ? trace_tlb_flush+0x37/0x180 [ 548.860402][ C0] ? trace_tlb_flush+0x4b/0x180 [ 548.860427][ C0] ? trace_tlb_flush+0x4b/0x180 [ 548.860453][ C0] ? trace_tlb_flush+0x4b/0x180 [ 548.860478][ C0] [ 548.860484][ C0] [ 548.860490][ C0] switch_mm_irqs_off+0x395/0xb10 [ 548.860518][ C0] ? kmem_cache_alloc_noprof+0x86/0x3d0 [ 548.860542][ C0] __text_poke+0x543/0xca0 [ 548.860564][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 548.860591][ C0] ? __pfx___text_poke+0x10/0x10 [ 548.860615][ C0] ? kmem_cache_alloc_noprof+0x86/0x3d0 [ 548.860644][ C0] text_poke_bp_batch+0x493/0x760 [ 548.860671][ C0] ? __kmalloc_node_track_caller_noprof+0xe5/0x510 [ 548.860696][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 548.860721][ C0] ? __jump_label_patch+0x1db/0x400 [ 548.860749][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 548.860781][ C0] text_poke_finish+0x30/0x40 [ 548.860806][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 548.860835][ C0] jump_label_update+0x1d7/0x400 [ 548.860863][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 548.860892][ C0] static_key_enable+0x1a/0x20 [ 548.860919][ C0] toggle_allocation_gate+0xfc/0x260 [ 548.860941][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 548.860963][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 548.860992][ C0] ? process_one_work+0x921/0x1ba0 [ 548.861013][ C0] ? lock_acquire+0x2f/0xb0 [ 548.861033][ C0] ? process_one_work+0x921/0x1ba0 [ 548.861055][ C0] process_one_work+0x9c5/0x1ba0 [ 548.861079][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 548.861101][ C0] ? __pfx_process_one_work+0x10/0x10 [ 548.861121][ C0] ? rcu_is_watching+0x12/0xc0 [ 548.861150][ C0] ? assign_work+0x1a0/0x250 [ 548.861188][ C0] worker_thread+0x6c8/0xf00 [ 548.861214][ C0] ? __pfx_worker_thread+0x10/0x10 [ 548.861234][ C0] kthread+0x2c1/0x3a0 [ 548.861258][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.861280][ C0] ? __pfx_kthread+0x10/0x10 [ 548.861304][ C0] ret_from_fork+0x45/0x80 [ 548.861323][ C0] ? __pfx_kthread+0x10/0x10 [ 548.861348][ C0] ret_from_fork_asm+0x1a/0x30 [ 548.861381][ C0] [ 548.862081][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.042040][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 549.042057][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 549.042080][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.042092][ T30] Call Trace: [ 549.042098][ T30] [ 549.042106][ T30] dump_stack_lvl+0x3d/0x1f0 [ 549.042136][ T30] panic+0x71d/0x800 [ 549.042165][ T30] ? __pfx_panic+0x10/0x10 [ 549.042192][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 549.042216][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 549.042236][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 549.042257][ T30] ? watchdog+0xd7e/0x1240 [ 549.042280][ T30] ? watchdog+0xd71/0x1240 [ 549.042306][ T30] watchdog+0xd8f/0x1240 [ 549.042333][ T30] ? __pfx_watchdog+0x10/0x10 [ 549.042355][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 549.042381][ T30] ? __kthread_parkme+0x148/0x220 [ 549.042409][ T30] ? __pfx_watchdog+0x10/0x10 [ 549.042432][ T30] kthread+0x2c1/0x3a0 [ 549.042455][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 549.042477][ T30] ? __pfx_kthread+0x10/0x10 [ 549.042502][ T30] ret_from_fork+0x45/0x80 [ 549.042522][ T30] ? __pfx_kthread+0x10/0x10 [ 549.042547][ T30] ret_from_fork_asm+0x1a/0x30 [ 549.042585][ T30] [ 549.044023][ T30] Kernel Offset: disabled